Zoho Manageengine Remote Access Plus Vulnerabilità

Sequenza temporale

Versione

10.1.2121	3
10.0.259	1
10.0.258	1
10.0.447	1
10.0	1

Contromisure

Official Fix	7
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	3

Sfruttabilità

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	9

Accesso al vettore

Not Defined	0
Physical	0
Local	0
Adjacent	5
Network	5

Autenticazione

Not Defined	0
High	0
Low	9
None	1

Interazione dell'utente

Not Defined	0
Required	0
None	10

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	3
≤5	3
≤6	1
≤7	1
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	3
≤5	3
≤6	1
≤7	1
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	3
≤5	2
≤6	2
≤7	3
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	0
≤7	0
≤8	0
≤9	1
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	4
<2k	3
<5k	3
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	10
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Versions (5): 10.0, 10.0.258, 10.0.259, 10.0.447, 10.1.2121

Link to Product Website: https://www.manageengine.com/

Tipo di software: Access Management Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
18/01/2023	7.7	7.4	Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2022-47966
16/04/2022	3.5	3.4	Zoho ManageEngine Remote Access Plus License Detail rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-26777
16/04/2022	3.5	3.4	Zoho ManageEngine Remote Access Plus Domain Detail rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-26653
30/09/2021	4.6	4.4	Zoho ManageEngine Remote Access Plus crittografia debole	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41829
30/09/2021	5.5	5.3	Zoho ManageEngine Remote Access Plus resetPWD.xml autenticazione debole	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41828
30/09/2021	3.5	3.4	Zoho ManageEngine Remote Access Plus DCBackupRestore JAR Archive autenticazione debole	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-41827
04/02/2021	6.3	6.3	Zoho ManageEngine Remote Access Plus User Administration Screen escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-16268
19/03/2020	7.5	7.5	Zoho ManageEngine Remote Access Plus User Permission escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-11361
17/02/2020	5.0	5.0	Zoho ManageEngine Remote Access Plus Mail Server Test escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-20474
31/01/2020	4.3	4.2	Zoho ManageEngine Remote Access Plus Credential Manager Credentials rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2020-8422

altre voci di Zoho Manageengine

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!