Zoho 脆弱性

タイムライン

タイプ

Not Defined301
Log Management Software58
Network Management Software56
Endpoint Management Software48
Remote Access Software12

製品

Zoho ManageEngine ServiceDesk Plus51
Zoho ManageEngine Desktop Central47
Zoho ManageEngine Applications Manager46
Zoho ManageEngine OpManager45
Zoho ManageEngine ADManager Plus42

修復

Official Fix277
Temporary Fix0
Workaround0
Unavailable8
Not Defined210

悪用可能性

High37
Functional0
Proof-of-Concept55
Unproven9
Not Defined394

アクセスベクター

Not Defined0
Physical2
Local9
Adjacent84
Network400

認証

Not Defined0
High14
Low223
None258

ユーザー操作

Not Defined0
Required132
None363

C3BM Index

CVSSv3 Base

≤10
≤20
≤33
≤432
≤565
≤6124
≤7114
≤895
≤955
≤107

CVSSv3 Temp

≤10
≤20
≤33
≤439
≤585
≤6151
≤776
≤885
≤951
≤105

VulDB

≤10
≤20
≤36
≤459
≤5105
≤697
≤7125
≤890
≤98
≤105

NVD

≤10
≤20
≤31
≤41
≤512
≤619
≤787
≤850
≤940
≤1084

CNA

≤10
≤20
≤30
≤40
≤53
≤62
≤73
≤85
≤94
≤104

ベンダー

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k102
<2k253
<5k139
<10k0
<25k1
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k484
<2k9
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (86): ADAudit (3), ADAudit Plus (10), ADAuditPlus (1), ADManager Plus (42), ADManagerPlus (1), AD Manager Plus (1), ADManager Plus Build (1), ADSelfService (2), ADSelfService Plus (41), ADSelfService Plus GINA Client (1), Access Manager Plus (10), Active Directory 360 (1), Analytics Plus (3), AppManager (1), Application Control Plus (4), Application Manager (5), Applications Manager (46), Asset Explorer (7), AssetExplorer (13), Asset Explorer Agent (3), Books - Accounting App (1), Browser Security Plus (1), CRM Lead Magnet Plugin (1), CloudSecurityPlus (1), Cloud Security Plus (1), DataSecurity Plus (4), Desktop Central (47), DesktopCentral (2), Desktop Central MSP (3), Device Control Plus (3), Device Expert (1), Endpoint Central (1), Endpoint Central MSP (1), Endpoint DLP (1), EventLog Analyzer (14), Event Log Analyzer (3), Exchange Reporter Plus (4), FireWall (1), Firewall Analyzer (12), Key Manager Plus (4), Log360 (6), Log Analyzer (2), M365 Manager Plus (2), ManageEngine (2), Manage Engine Desktop Central (1), ManageEngine Log360 (1), ManageEngine Netflow Analyzer (4), ManageEngine OpManager (13), ManageEngine OpUtils (1), ManageEngine PAM360 (2), Mobile Device Manager Plus (2), Monitoring Manager (3), NetFlow Analyzer (5), Netflow Analyzer (10), Netflow Analyzer Professional (7), Network Configuration Manager (11), O365 Manager Plus (2), OPManager (2), OS Deployer (1), OpManager (45), OpManager MSP (3), OpManager Plus (3), OpStor (2), OpUtils (7), PAM 360 (1), PAM360 (6), Password Manager Pro (30), Patch Connect Plus (2), Patch Manager Plus (2), Recovery Manager Plus (2), Remote Access Plus (10), Remote Access Plus Server (3), Remote Monitoring and Management (1), SalesIQ (2), ServiceDesk (3), Service Desk Plus (1), ServiceDesk Plus (51), ServiceDesk Plus MSP (13), Service Plus (1), SharePoint Manager Plus (2), Site24x7 Mobile Network Poller (1), Support Center Plus (4), SupportCenter Plus (14), Vulnerability Manager Plus (2), WebNMS Framework (4), and SupportCenter Plus (1)

Link to Vendor Website: https://www.manageengine.com/

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2024年03月11日8.58.5Zoho ManageEngine Desktop Central 特権昇格Endpoint Management SoftwareNot DefinedNot Defined0.000430.03CVE-2024-2370
2024年02月16日7.37.1Zoho ManageEngine Exchange Reporter Plus Report Exporting SQLインジェクションReporting SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-21775
2024年02月02日7.87.7Zoho ManageEngine ADAudit Plus File-Summary DrillDown SQLインジェクション未知Not DefinedOfficial Fix0.005380.05CVE-2024-0269
2024年02月02日7.87.7Zoho ManageEngine ADAudit Plus Home Graph-Data SQLインジェクション未知Not DefinedOfficial Fix0.005380.06CVE-2024-0253
2024年02月02日7.67.6Zoho ManageEngine ADAudit Plus Aggregate Report SQLインジェクション未知Not DefinedNot Defined0.077290.04CVE-2023-48793
2024年02月02日7.67.6Zoho ManageEngine ADAudit Plus SQLインジェクション未知Not DefinedNot Defined0.077290.00CVE-2023-48792
2024年01月25日2.52.5Zoho ManageEngine ADAudit Plus ディレクトリトラバーサル未知Not DefinedOfficial Fix0.000690.03CVE-2023-50785
2024年01月18日4.44.4Zoho ManageEngine ServiceDesk Plus MSP Task Name クロスサイトスクリプティング未知Not DefinedOfficial Fix0.007330.02CVE-2023-49943
2024年01月11日9.39.1Zoho ManageEngine ADSelfService Plus Load Balancer Privilege Escalation未知Not DefinedOfficial Fix0.001350.07CVE-2024-0252
2024年01月08日7.77.7Zoho ManageEngine OpManager HTTP Request uploadMib ディレクトリトラバーサルNetwork Management SoftwareNot DefinedNot Defined0.001640.04CVE-2023-47211
2023年11月22日5.75.6Zoho ManageEngine Recovery Manager Plus Proxy Setting Privilege Escalation未知Not DefinedOfficial Fix0.005070.00CVE-2023-48646
2023年11月16日4.44.3Zoho ManageEngine Service Desk Plus Encryption Key 情報の漏洩Access Management SoftwareNot DefinedOfficial Fix0.000420.01CVE-2023-6105
2023年11月03日6.76.7Zoho ManageEngine Desktop Central HTTP Request smtpConfig.do 特権昇格Endpoint Management SoftwareNot DefinedNot Defined0.003860.00CVE-2023-4769
2023年11月03日5.25.2Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.pdf 特権昇格Endpoint Management SoftwareNot DefinedNot Defined0.004640.02CVE-2023-4768
2023年11月03日5.25.2Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.csv 特権昇格Endpoint Management SoftwareNot DefinedNot Defined0.004640.00CVE-2023-4767
2023年09月27日5.55.3Zoho ManageEngine ADManager Plus REST API 弱い認証未知Not DefinedOfficial Fix0.014120.04CVE-2023-41904
2023年09月12日5.75.6Zoho ManageEngine ADManager Plus Privilege Escalation未知Not DefinedOfficial Fix0.001130.00CVE-2023-38743
2023年09月01日3.63.6Zoho ManageEngine ADManager Plus ディレクトリトラバーサル未知Not DefinedNot Defined0.001010.03CVE-2023-39912
2023年08月29日7.67.6Zoho ManageEngine ADManager Plus 2FA 弱い認証未知Not DefinedNot Defined0.025510.06CVE-2023-35785
2023年08月18日5.45.3Zoho ManageEngine ADManager Plus Build 特権昇格未知Not DefinedNot Defined0.000600.02CVE-2023-31492
2023年08月11日4.84.7Zoho ManageEngine Password Manager Pro Query Report クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000970.00CVE-2020-27449
2023年08月11日4.84.8Zoho ManageEngine Applications Manager クロスサイトスクリプティングLog Management SoftwareNot DefinedNot Defined0.005220.03CVE-2023-38333
2023年08月07日6.56.5Zoho ManageEngine ADAudit Plus Event Analysis 特権昇格未知Not DefinedNot Defined0.031550.00CVE-2023-32783
2023年08月04日5.05.0Zoho ManageEngine ADManager Plus 情報の漏洩未知Not DefinedNot Defined0.000480.00CVE-2023-38332
2023年08月04日5.85.8Zoho ManageEngine Network Configuration Manager WebSocket Endpoint 情報の漏洩未知Not DefinedNot Defined0.001340.06CVE-2023-29505

470 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 470 results.

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!