Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Zohocorp ManageEngine Key Manager Plus 7151 Clear all filters
TI-2026-84196 CVE-2026-77691 · GHSA-v5fq-f263-f227

Command injection in ManageEngine Key Manager Plus CA configuration

Priority MEDIUM 40

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01392 Published 2026-11-03 Fixed in 7151 CWE-78
TI-2026-84189 CVE-2026-77778 · GHSA-jhqj-68fm-5856

Improper access control in ManageEngine Key Manager Plus

Priority LOW 31

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00398 Published 2026-11-03 Fixed in 7151 CWE-1220
TI-2026-84188 CVE-2026-77777 · GHSA-9c74-3mf8-v92c

Improper access control in ManageEngine Key Manager Plus

Priority LOW 33

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00749 Published 2026-11-03 Fixed in 7151 CWE-1220
TI-2026-84152 CVE-2026-77800 · GHSA-vxjg-c5j8-2q49

SAML authentication bypass in ManageEngine Key Manager Plus

Priority LOW 37

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00958 Published 2026-11-03 Fixed in 7151 CWE-304
TI-2026-84151 CVE-2026-77799 · GHSA-7g56-c8wh-g2wc

Two-factor authentication bypass in ManageEngine Key Manager Plus

Priority LOW 37

ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01177 Published 2026-11-03 Fixed in 7151 CWE-288