Zoho Manageengine Password Manager Pro Schwachstellen

Zeitverlauf

Version

7.04
8.02
110011
43091
11.01

Massnahmen

Official Fix25
Temporary Fix0
Workaround0
Unavailable0
Not Defined5

Ausnutzbarkeit

High1
Functional0
Proof-of-Concept2
Unproven8
Not Defined19

Zugriffsart

Not Defined0
Physical0
Local0
Adjacent5
Network25

Authentisierung

Not Defined0
High0
Low12
None18

Benutzeraktivität

Not Defined0
Required7
None23

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤10
≤20
≤30
≤41
≤51
≤69
≤79
≤88
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤57
≤68
≤76
≤86
≤92
≤100

VulDB

≤10
≤20
≤30
≤42
≤53
≤611
≤79
≤85
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤107

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k3
<2k20
<5k6
<10k0
<25k1
<50k0
<100k0
≥100k0

Exploit heute

<1k30
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (21): 7.0, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 10.0, 10.1, 10.2, 10.3, 10.4, 11.0, 11.1, 11.2, 4309, 11001, Build 6104

Link to Product Website: https://www.manageengine.com/

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
11.08.20234.84.7Zoho ManageEngine Password Manager Pro Query Report Cross Site Scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-27449
27.04.20237.07.0Zoho ManageEngine ManageEngine PAM360 schwache Authentisierung$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-2291
18.01.20237.77.4Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2022-47966
05.01.20237.67.5Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 SQL Injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-47523
12.11.20228.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus SQL Injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43671
12.11.20228.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus SQL Injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43672
17.09.20228.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus SQL Injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-40300
20.07.20228.58.4Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35405
19.07.20226.86.8Zoho ManageEngine Password Manager Pro/OPManager erweiterte Rechte$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-35404
29.04.20225.55.3Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 RestAPI Synchronize erweiterte Rechte$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-29081

20 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 20 results.

weitere Einträge von Zoho Manageengine

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!