Manageengine Vulnerabilidades

Curso de tempo

Tipo

Not Defined	322
Network Management Software	62
Log Management Software	60
Endpoint Management Software	48
Access Management Software	10

Produto

Zoho ManageEngine ServiceDesk Plus	51
Zoho ManageEngine Desktop Central	47
Zoho ManageEngine Applications Manager	46
Zoho ManageEngine OpManager	45
Zoho ManageEngine ADManager Plus	42

Medidas

Official Fix	280
Temporary Fix	0
Workaround	0
Unavailable	13
Not Defined	225

Explorabilidade

High	39
Functional	0
Proof-of-Concept	71
Unproven	11
Not Defined	397

Tipo de acesso

Not Defined	0
Physical	2
Local	9
Adjacent	87
Network	420

Autenticação

Not Defined	0
High	14
Low	229
None	275

Actividade do utilizador

Not Defined	0
Required	153
None	365

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	4
≤4	36
≤5	82
≤6	127
≤7	109
≤8	99
≤9	53
≤10	8

CVSSv3 Temp

≤1	0
≤2	0
≤3	4
≤4	45
≤5	100
≤6	154
≤7	73
≤8	85
≤9	51
≤10	6

VulDB

≤1	0
≤2	0
≤3	7
≤4	62
≤5	123
≤6	100
≤7	121
≤8	91
≤9	8
≤10	6

NVD

≤1	0
≤2	0
≤3	1
≤4	1
≤5	11
≤6	17
≤7	87
≤8	49
≤9	41
≤10	82

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	3
≤6	2
≤7	3
≤8	3
≤9	4
≤10	4

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	1

Explorar 0 dia

<1k	120
<2k	258
<5k	139
<10k	0
<25k	1
<50k	0
<100k	0
≥100k	0

Explorar hoje

<1k	504
<2k	12
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (82): ADAudit (3), ADAudit Plus (11), ADAuditPlus (1), ADManager Plus (43), ADManagerPlus (1), AD Manager Plus (1), ADManager Plus Build (1), ADSelfService (2), ADSelfService Plus (47), ADSelfService Plus GINA Client (1), Access Manager Plus (10), Active Directory 360 (1), Analytics Plus (3), AppManager (1), Application Control Plus (2), Application Manager (5), Applications Manager (51), Asset Explorer (7), AssetExplorer (13), Asset Explorer Agent (3), Browser Security Plus (1), CloudSecurityPlus (1), Cloud Security Plus (1), DataSecurity Plus (4), Desktop Central (48), DesktopCentral (2), Desktop Central MSP (3), Device Control Plus (3), Device Expert (1), Endpoint Central (1), Endpoint Central MSP (1), Endpoint DLP (1), EventLog Analyzer (15), Event Log Analyzer (3), Exchange Reporter Plus (4), FireWall (1), Firewall Analyzer (14), Key Manager Plus (4), Log360 (6), Log Analyzer (2), M365 Manager Plus (2), MDM (1), ManageEngine (2), ManageEngine Log360 (1), ManageEngine Netflow Analyzer (4), ManageEngine OpManager (13), ManageEngine OpUtils (1), ManageEngine PAM360 (2), Mobile Device Manager Plus (2), Monitoring Manager (3), NetFlow Analyzer (5), Netflow Analyzer (15), Netflow Analyzer Professional (7), Network Configuration Manager (11), O365 Manager Plus (2), OPManager (2), OS Deployer (1), OpManager (51), OpManager MSP (3), OpManager Plus (3), OpStor (2), OpUtils (9), PAM 360 (1), PAM360 (6), Password Manager Pro (30), PasswordManager Pro (1), Password Manager Pro6.1 (1), Patch Connect Plus (2), Patch Manager Plus (2), Recovery Manager Plus (2), Remote Access Plus (10), Remote Monitoring and Management (1), ServiceDesk (3), Service Desk Plus (1), ServiceDesk Plus (55), ServiceDesk Plus MSP (13), Service Plus (1), SharePoint Manager Plus (2), Support Center Plus (4), SupportCenter Plus (15), Vulnerability Manager Plus (2), and SupportCenter Plus (1)

Link to Vendor Website: https://www.manageengine.com/

Publicado em	Base	Temp	Vulnerabilidade	Prod	Exp	Mas	EPSS	CTI	CVE
11/03/2024	8.5	8.5	Zoho ManageEngine Desktop Central direitos alargados	Endpoint Management Software	Not Defined	Not Defined	0.00043	0.03	CVE-2024-2370
16/02/2024	7.3	7.1	Zoho ManageEngine Exchange Reporter Plus Report Exporting Injecção SQL	Reporting Software	Not Defined	Official Fix	0.00043	0.05	CVE-2024-21775
02/02/2024	7.8	7.7	Zoho ManageEngine ADAudit Plus File-Summary DrillDown Injecção SQL	Desconhecido	Not Defined	Official Fix	0.00538	0.05	CVE-2024-0269
02/02/2024	7.8	7.7	Zoho ManageEngine ADAudit Plus Home Graph-Data Injecção SQL	Desconhecido	Not Defined	Official Fix	0.00538	0.06	CVE-2024-0253
02/02/2024	7.6	7.6	Zoho ManageEngine ADAudit Plus Aggregate Report Injecção SQL	Desconhecido	Not Defined	Not Defined	0.07729	0.04	CVE-2023-48793
02/02/2024	7.6	7.6	Zoho ManageEngine ADAudit Plus Injecção SQL	Desconhecido	Not Defined	Not Defined	0.07729	0.00	CVE-2023-48792
25/01/2024	2.5	2.5	Zoho ManageEngine ADAudit Plus Directório Traversal	Desconhecido	Not Defined	Official Fix	0.00069	0.03	CVE-2023-50785
18/01/2024	4.4	4.4	Zoho ManageEngine ServiceDesk Plus MSP Task Name Roteiro Cruzado de Sítios	Desconhecido	Not Defined	Official Fix	0.00733	0.02	CVE-2023-49943
11/01/2024	9.3	9.1	Zoho ManageEngine ADSelfService Plus Load Balancer Privilege Escalation	Desconhecido	Not Defined	Official Fix	0.00135	0.07	CVE-2024-0252
08/01/2024	7.7	7.7	Zoho ManageEngine OpManager HTTP Request uploadMib Directório Traversal	Network Management Software	Not Defined	Not Defined	0.00164	0.04	CVE-2023-47211
22/11/2023	5.7	5.6	Zoho ManageEngine Recovery Manager Plus Proxy Setting Privilege Escalation	Desconhecido	Not Defined	Official Fix	0.00507	0.00	CVE-2023-48646
16/11/2023	4.4	4.3	Zoho ManageEngine Service Desk Plus Encryption Key Divulgação de Informação	Access Management Software	Not Defined	Official Fix	0.00042	0.01	CVE-2023-6105
03/11/2023	6.7	6.7	Zoho ManageEngine Desktop Central HTTP Request smtpConfig.do direitos alargados	Endpoint Management Software	Not Defined	Not Defined	0.00386	0.00	CVE-2023-4769
03/11/2023	5.2	5.2	Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.pdf direitos alargados	Endpoint Management Software	Not Defined	Not Defined	0.00464	0.02	CVE-2023-4768
03/11/2023	5.2	5.2	Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.csv direitos alargados	Endpoint Management Software	Not Defined	Not Defined	0.00464	0.00	CVE-2023-4767
03/11/2023	6.4	6.4	NCSIST ManageEngine MDM Directório Traversal	Desconhecido	Not Defined	Not Defined	0.00114	0.00	CVE-2023-41344
27/09/2023	5.5	5.3	Zoho ManageEngine ADManager Plus REST API Fraca autenticação	Desconhecido	Not Defined	Official Fix	0.01412	0.04	CVE-2023-41904
12/09/2023	5.7	5.6	Zoho ManageEngine ADManager Plus Privilege Escalation	Desconhecido	Not Defined	Official Fix	0.00113	0.00	CVE-2023-38743
01/09/2023	3.6	3.6	Zoho ManageEngine ADManager Plus Directório Traversal	Desconhecido	Not Defined	Not Defined	0.00101	0.03	CVE-2023-39912
29/08/2023	7.6	7.6	Zoho ManageEngine ADManager Plus 2FA Fraca autenticação	Desconhecido	Not Defined	Not Defined	0.02551	0.06	CVE-2023-35785
18/08/2023	5.4	5.3	Zoho ManageEngine ADManager Plus Build direitos alargados	Desconhecido	Not Defined	Not Defined	0.00060	0.02	CVE-2023-31492
11/08/2023	4.8	4.7	Zoho ManageEngine Password Manager Pro Query Report Roteiro Cruzado de Sítios	Desconhecido	Not Defined	Official Fix	0.00097	0.00	CVE-2020-27449
11/08/2023	4.8	4.8	Zoho ManageEngine Applications Manager Roteiro Cruzado de Sítios	Log Management Software	Not Defined	Not Defined	0.00522	0.03	CVE-2023-38333
07/08/2023	6.5	6.5	Zoho ManageEngine ADAudit Plus Event Analysis direitos alargados	Desconhecido	Not Defined	Not Defined	0.03155	0.00	CVE-2023-32783
04/08/2023	5.0	5.0	Zoho ManageEngine ADManager Plus Divulgação de Informação	Desconhecido	Not Defined	Not Defined	0.00048	0.00	CVE-2023-38332

Manageengine Vulnerabilidades

Curso de tempo

Tipo

Produto

Medidas

Explorabilidade

Tipo de acesso

Autenticação

Actividade do utilizador

C3BM Index

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Fabricante

Research

Explorar 0 dia

Explorar hoje

Explorar o volume do mercado

🔴 CTI Actividades

🔒 Login Required

Do you know our Splunk app?