Zoho Manageengine Analytics Plus Vulnerabilidad

Cronología

Versión

4.3.01
4.3.11
4.3.21
4.3.31
4.3.41

Contramedidas

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Explotabilidad

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined2

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network3

Autenticación

Not Defined0
High0
Low2
None1

La interacción del usuario

Not Defined0
Required0
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤61
≤72
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k2
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k3
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (6): 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4349

Link to Product Website: https://www.manageengine.com/

Tipo de software: Access Management Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-01-187.77.6Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution$0-$5k$0-$5kHighOfficial Fix0.00CVE-2022-47966
2022-08-166.96.7Zoho ManageEngine Analytics Plus XML File XML External Entity$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-21641
2022-08-168.07.9Zoho ManageEngine Analytics Plus zropusermgmt directory traversal$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-21642

más entradas por Zoho Manageengine

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!