Zoho Manageengine Password Manager Pro Luki w zabezpieczeniach

Oś czasu

Wersja

7.04
8.02
110011
43091
11.01

Przeciwdziałanie

Official Fix25
Temporary Fix0
Workaround0
Unavailable0
Not Defined5

Wykorzystywanie

High1
Functional0
Proof-of-Concept2
Unproven8
Not Defined19

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent5
Network25

Uwierzytelnianie

Not Defined0
High0
Low12
None18

Interakcja z użytkownikiem

Not Defined0
Required7
None23

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤41
≤51
≤69
≤79
≤88
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤57
≤68
≤76
≤86
≤92
≤100

VulDB

≤10
≤20
≤30
≤42
≤53
≤611
≤79
≤85
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤107

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k3
<2k20
<5k6
<10k0
<25k1
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k30
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (21): 7.0, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 10.0, 10.1, 10.2, 10.3, 10.4, 11.0, 11.1, 11.2, 4309, 11001, Build 6104

Link to Product Website: https://www.manageengine.com/

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-08-114.84.7Zoho ManageEngine Password Manager Pro Query Report cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-27449
2023-04-277.07.0Zoho ManageEngine ManageEngine PAM360 weak authentication$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-2291
2023-01-187.77.4Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2022-47966
2023-01-057.67.5Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-47523
2022-11-128.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43671
2022-11-128.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43672
2022-09-178.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-40300
2022-07-208.58.4Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35405
2022-07-196.86.8Zoho ManageEngine Password Manager Pro/OPManager privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-35404
2022-04-295.55.3Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 RestAPI Synchronize privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-29081

20 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 20 results.

więcej wpisów autorstwa Zoho Manageengine

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!