Zoho Manageengine Manageengine Vulnerabilidad

Cronología

Versión

12.25
7.0.0.24
12.02
12.12
12.32

Contramedidas

Official Fix11
Temporary Fix0
Workaround0
Unavailable0
Not Defined12

Explotabilidad

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined21

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent3
Network20

Autenticación

Not Defined0
High0
Low8
None15

La interacción del usuario

Not Defined0
Required6
None17

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤64
≤712
≤82
≤93
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤610
≤77
≤81
≤93
≤100

VulDB

≤10
≤20
≤30
≤41
≤55
≤64
≤79
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤76
≤85
≤91
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k2
<2k17
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k23
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (16): 7.0.0.2, 12.0, 12.1, 12.2, 12.3, 12.4, 12.4x, 12.5.174, 12.5.556, 4309, 5234, 125140, 125454, 125466, 125587, 125602

Link to Product Website: https://www.manageengine.com/

Tipo de software: Access Management Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-04-277.07.0Zoho ManageEngine ManageEngine PAM360 autenticación débil$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-2291
2022-04-186.36.0Zoho ManageEngine ManageEngine OpManager Inventory Reports Module sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-27908
2021-12-206.36.0Zoho ManageEngine ManageEngine PAM360 Authentication autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-44525
2021-12-096.36.0Zoho ManageEngine ManageEngine OpUtils Audit Directory autenticación débil$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-44514
2021-11-028.58.4Zoho ManageEngine ManageEngine Log360 Database Configuration escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-20136
2021-10-146.36.0Zoho ManageEngine NetFlow Analyzer sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41075
2021-10-146.36.0Zoho ManageEngine Support Diagnostics Module getDataCollectionFailureReason sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-40493
2021-10-016.36.0Zoho ManageEngine ManageEngine OpManager getReportData API sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41288
2021-09-224.84.8Zoho ManageEngine ManageEngine OpManager API Key cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-19554
2021-04-227.37.0Zoho ManageEngine ManageEngine OpManager escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-3287

13 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 13 results.

más entradas por Zoho Manageengine

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!