Zoho Manageengine Adselfservice Plus الثغرات

التسلسل الزمني

النسخة

61035
5.04
5.14
5.x4
5.23

معالجة

Official Fix24
Temporary Fix0
Workaround0
Unavailable1
Not Defined17

قابلية الاستغلال

High3
Functional0
Proof-of-Concept3
Unproven0
Not Defined36

متجه الوصول

Not Defined0
Physical2
Local1
Adjacent10
Network29

توثيق

Not Defined0
High0
Low16
None26

تفاعل المستخدم

Not Defined0
Required14
None28

C3BM Index

السنة السابقة

CVSSv3 Base

≤10
≤20
≤31
≤44
≤54
≤613
≤78
≤85
≤95
≤102

CVSSv3 Temp

≤10
≤20
≤31
≤45
≤54
≤615
≤77
≤83
≤96
≤101

VulDB

≤10
≤20
≤32
≤46
≤59
≤67
≤78
≤88
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤77
≤83
≤91
≤109

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k14
<2k14
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k40
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

السنة السابقة

🔴 CTI النشاطات

Affected Versions (33): 4.0, 4.1, 4.2, 4.3, 4.5, 5, 5.0, 5.0 Build 5704, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.6 Build 5607, 5.7, 6.1, 5814, 6013, 6101, 6102, 6103, 6111, 6113, 6121, 6203, 6217, 6401

Link to Product Website: https://www.manageengine.com/

منشورBaseTempالثغرة0dayاليومق�معالجةCTICVE
11/01/20249.39.1Zoho ManageEngine ADSelfService Plus Load Balancer Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-0252
22/06/20236.86.8Zoho ManageEngine ADSelfService Plus GINA Client توثيق ضعيف$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-35719
20/06/20238.07.9Zoho ManageEngine ADSelfService Plus توثيق ضعيف$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2023-35854
06/04/20235.55.4Zoho ManageEngine ADSelfService Plus Mobile App Authentication API الحرمان من الخدمة$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-28342
24/03/20235.85.8Zoho ManageEngine ADSelfService Plus IDM Application تجاوز الصلاحيات$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-36413
18/01/20237.77.4Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2022-47966
20/05/20223.53.4Zoho ManageEngine ADSelfService Plus POST Request login الكشف عن المعلومات$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-28987
19/04/20222.62.5Zoho ManageEngine ADSelfService Plus Configuration الكشف عن المعلومات$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-29457
18/04/20226.36.0Zoho ManageEngine ADSelfService Plus تجاوز الصلاحيات$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-28810
10/09/20216.36.0Zoho ManageEngine ADSelfService Plus Database Linking حقن إس كيو إل$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-37422

32 بعض الادخالات لم يتم عرضها

المزيد من الادخالات بحسب Zoho Manageengine

Do you want to use VulDB in your project?

Use the official API to access entries easily!