Zoho Manageengine Password Manager Pro 漏洞

时间轴

版本

7.04
8.02
110011
43091
11.01

修正

Official Fix25
Temporary Fix0
Workaround0
Unavailable0
Not Defined5

易受攻击性

High1
Functional0
Proof-of-Concept2
Unproven8
Not Defined19

访问向量

Not Defined0
Physical0
Local0
Adjacent5
Network25

身份验证

Not Defined0
High0
Low12
None18

用户交互

Not Defined0
Required7
None23

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤30
≤41
≤51
≤69
≤79
≤88
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤57
≤68
≤76
≤86
≤92
≤100

VulDB

≤10
≤20
≤30
≤42
≤53
≤611
≤79
≤85
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤92
≤107

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k3
<2k20
<5k6
<10k0
<25k1
<50k0
<100k0
≥100k0

本日攻击

<1k30
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (21): 7.0, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, 9.2, 9.3, 10.0, 10.1, 10.2, 10.3, 10.4, 11.0, 11.1, 11.2, 4309, 11001, Build 6104

Link to Product Website: https://www.manageengine.com/

已发布BaseTemp漏洞0day今天易修正CTICVE
2023-08-114.84.7Zoho ManageEngine Password Manager Pro Query Report 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-27449
2023-04-277.07.0Zoho ManageEngine ManageEngine PAM360 弱身份验证$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-2291
2023-01-187.77.4Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2022-47966
2023-01-057.67.5Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 SQL注入$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-47523
2022-11-128.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus SQL注入$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43671
2022-11-128.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus SQL注入$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43672
2022-09-178.07.9Zoho ManageEngine Password Manager Pro/PAM360/Access Manager Plus SQL注入$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-40300
2022-07-208.58.4Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35405
2022-07-196.86.8Zoho ManageEngine Password Manager Pro/OPManager 权限升级$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-35404
2022-04-295.55.3Zoho ManageEngine Access Manager Plus/Password Manager Pro/PAM360 RestAPI Synchronize 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-29081

20 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 20 results.

更多条目由 Zoho Manageengine

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!