Manageengine Уязвимости

Временная шкала

Тип

Продукт

Zoho ManageEngine ServiceDesk Plus51
Zoho ManageEngine Desktop Central47
Zoho ManageEngine Applications Manager46
Zoho ManageEngine OpManager45
Zoho ManageEngine ADManager Plus42

Устранение последствий

Official Fix280
Temporary Fix0
Workaround0
Unavailable13
Not Defined225

Эксплуатационная пригодность

High42
Functional0
Proof-of-Concept70
Unproven11
Not Defined395

Вектор доступа

Not Defined0
Physical2
Local9
Adjacent87
Network420

Аутентификация

Not Defined0
High14
Low229
None275

Взаимодействие с пользователем

Not Defined0
Required153
None365

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤436
≤582
≤6127
≤7109
≤899
≤953
≤108

CVSSv3 Temp

≤10
≤20
≤34
≤445
≤5100
≤6154
≤773
≤885
≤951
≤106

VulDB

≤10
≤20
≤37
≤462
≤5123
≤6100
≤7121
≤891
≤98
≤106

NVD

≤10
≤20
≤31
≤41
≤511
≤617
≤787
≤849
≤941
≤1082

CNA

≤10
≤20
≤30
≤40
≤53
≤62
≤73
≤83
≤94
≤104

Поставщик

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤101

Эксплойт 0-дня

<1k120
<2k260
<5k137
<10k0
<25k1
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k505
<2k12
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Products (82): ADAudit (3), ADAudit Plus (11), ADAuditPlus (1), ADManager Plus (43), ADManagerPlus (1), AD Manager Plus (1), ADManager Plus Build (1), ADSelfService (2), ADSelfService Plus (47), ADSelfService Plus GINA Client (1), Access Manager Plus (10), Active Directory 360 (1), Analytics Plus (3), AppManager (1), Application Control Plus (2), Application Manager (5), Applications Manager (51), Asset Explorer (7), AssetExplorer (13), Asset Explorer Agent (3), Browser Security Plus (1), CloudSecurityPlus (1), Cloud Security Plus (1), DataSecurity Plus (4), Desktop Central (48), DesktopCentral (2), Desktop Central MSP (3), Device Control Plus (3), Device Expert (1), Endpoint Central (1), Endpoint Central MSP (1), Endpoint DLP (1), EventLog Analyzer (15), Event Log Analyzer (3), Exchange Reporter Plus (4), FireWall (1), Firewall Analyzer (14), Key Manager Plus (4), Log360 (6), Log Analyzer (2), M365 Manager Plus (2), MDM (1), ManageEngine (2), ManageEngine Log360 (1), ManageEngine Netflow Analyzer (4), ManageEngine OpManager (13), ManageEngine OpUtils (1), ManageEngine PAM360 (2), Mobile Device Manager Plus (2), Monitoring Manager (3), NetFlow Analyzer (5), Netflow Analyzer (15), Netflow Analyzer Professional (7), Network Configuration Manager (11), O365 Manager Plus (2), OPManager (2), OS Deployer (1), OpManager (51), OpManager MSP (3), OpManager Plus (3), OpStor (2), OpUtils (9), PAM 360 (1), PAM360 (6), Password Manager Pro (30), PasswordManager Pro (1), Password Manager Pro6.1 (1), Patch Connect Plus (2), Patch Manager Plus (2), Recovery Manager Plus (2), Remote Access Plus (10), Remote Monitoring and Management (1), ServiceDesk (3), Service Desk Plus (1), ServiceDesk Plus (55), ServiceDesk Plus MSP (13), Service Plus (1), SharePoint Manager Plus (2), Support Center Plus (4), SupportCenter Plus (15), Vulnerability Manager Plus (2), and SupportCenter Plus (1)

Link to Vendor Website: https://www.manageengine.com/

ОпубликованоBaseTempУязвимостиProdЭ�RemEPSSCTICVE
11.03.20248.58.5Zoho ManageEngine Desktop Central эскалация привилегийEndpoint Management SoftwareNot DefinedNot Defined0.000430.03CVE-2024-2370
16.02.20247.37.1Zoho ManageEngine Exchange Reporter Plus Report Exporting sql-инъекцияReporting SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-21775
02.02.20247.87.7Zoho ManageEngine ADAudit Plus File-Summary DrillDown sql-инъекцияНеизвестноNot DefinedOfficial Fix0.005380.05CVE-2024-0269
02.02.20247.87.7Zoho ManageEngine ADAudit Plus Home Graph-Data sql-инъекцияНеизвестноNot DefinedOfficial Fix0.005380.06CVE-2024-0253
02.02.20247.67.6Zoho ManageEngine ADAudit Plus Aggregate Report sql-инъекцияНеизвестноNot DefinedNot Defined0.077290.04CVE-2023-48793
02.02.20247.67.6Zoho ManageEngine ADAudit Plus sql-инъекцияНеизвестноNot DefinedNot Defined0.077290.00CVE-2023-48792
25.01.20242.52.5Zoho ManageEngine ADAudit Plus обход каталогаНеизвестноNot DefinedOfficial Fix0.000690.03CVE-2023-50785
18.01.20244.44.4Zoho ManageEngine ServiceDesk Plus MSP Task Name межсайтовый скриптингНеизвестноNot DefinedOfficial Fix0.007330.02CVE-2023-49943
11.01.20249.39.1Zoho ManageEngine ADSelfService Plus Load Balancer Privilege EscalationНеизвестноNot DefinedOfficial Fix0.001350.05CVE-2024-0252
08.01.20247.77.7Zoho ManageEngine OpManager HTTP Request uploadMib обход каталогаNetwork Management SoftwareNot DefinedNot Defined0.001640.04CVE-2023-47211
22.11.20235.75.6Zoho ManageEngine Recovery Manager Plus Proxy Setting Privilege EscalationНеизвестноNot DefinedOfficial Fix0.005070.00CVE-2023-48646
16.11.20234.44.3Zoho ManageEngine Service Desk Plus Encryption Key раскрытие информацииAccess Management SoftwareNot DefinedOfficial Fix0.000420.01CVE-2023-6105
03.11.20236.76.7Zoho ManageEngine Desktop Central HTTP Request smtpConfig.do эскалация привилегийEndpoint Management SoftwareNot DefinedNot Defined0.003860.00CVE-2023-4769
03.11.20235.25.2Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.pdf эскалация привилегийEndpoint Management SoftwareNot DefinedNot Defined0.004640.03CVE-2023-4768
03.11.20235.25.2Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.csv эскалация привилегийEndpoint Management SoftwareNot DefinedNot Defined0.004640.00CVE-2023-4767
03.11.20236.46.4NCSIST ManageEngine MDM обход каталогаНеизвестноNot DefinedNot Defined0.001140.00CVE-2023-41344
27.09.20235.55.3Zoho ManageEngine ADManager Plus REST API слабая аутентификацияНеизвестноNot DefinedOfficial Fix0.014120.04CVE-2023-41904
12.09.20235.75.6Zoho ManageEngine ADManager Plus Privilege EscalationНеизвестноNot DefinedOfficial Fix0.001300.00CVE-2023-38743
01.09.20233.63.6Zoho ManageEngine ADManager Plus обход каталогаНеизвестноNot DefinedNot Defined0.001010.03CVE-2023-39912
29.08.20237.67.6Zoho ManageEngine ADManager Plus 2FA слабая аутентификацияНеизвестноNot DefinedNot Defined0.025510.06CVE-2023-35785
18.08.20235.45.3Zoho ManageEngine ADManager Plus Build эскалация привилегийНеизвестноNot DefinedNot Defined0.000600.02CVE-2023-31492
11.08.20234.84.7Zoho ManageEngine Password Manager Pro Query Report межсайтовый скриптингНеизвестноNot DefinedOfficial Fix0.000970.00CVE-2020-27449
11.08.20234.84.8Zoho ManageEngine Applications Manager межсайтовый скриптингLog Management SoftwareNot DefinedNot Defined0.005220.03CVE-2023-38333
07.08.20236.56.5Zoho ManageEngine ADAudit Plus Event Analysis эскалация привилегийНеизвестноNot DefinedNot Defined0.031550.03CVE-2023-32783
04.08.20235.05.0Zoho ManageEngine ADManager Plus раскрытие информацииНеизвестноNot DefinedNot Defined0.000480.00CVE-2023-38332

493 больше записей не показано

Might our Artificial Intelligence support you?

Check our Alexa App!