Zoho 漏洞

时间轴

类型

Not Defined301
Log Management Software58
Network Management Software56
Endpoint Management Software48
Remote Access Software12

产品

Zoho ManageEngine ServiceDesk Plus51
Zoho ManageEngine Desktop Central47
Zoho ManageEngine Applications Manager46
Zoho ManageEngine OpManager45
Zoho ManageEngine ADManager Plus42

修正

Official Fix277
Temporary Fix0
Workaround0
Unavailable8
Not Defined210

易受攻击性

High37
Functional0
Proof-of-Concept55
Unproven9
Not Defined394

访问向量

Not Defined0
Physical2
Local9
Adjacent84
Network400

身份验证

Not Defined0
High14
Low223
None258

用户交互

Not Defined0
Required132
None363

C3BM Index

CVSSv3 Base

≤10
≤20
≤33
≤432
≤565
≤6124
≤7114
≤895
≤955
≤107

CVSSv3 Temp

≤10
≤20
≤33
≤439
≤585
≤6151
≤776
≤885
≤951
≤105

VulDB

≤10
≤20
≤36
≤459
≤5105
≤697
≤7125
≤890
≤98
≤105

NVD

≤10
≤20
≤31
≤41
≤512
≤619
≤787
≤850
≤940
≤1084

CNA

≤10
≤20
≤30
≤40
≤53
≤62
≤73
≤85
≤94
≤104

供应商

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k102
<2k253
<5k139
<10k0
<25k1
<50k0
<100k0
≥100k0

本日攻击

<1k484
<2k9
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (86): ADAudit (3), ADAudit Plus (10), ADAuditPlus (1), ADManager Plus (42), ADManagerPlus (1), AD Manager Plus (1), ADManager Plus Build (1), ADSelfService (2), ADSelfService Plus (41), ADSelfService Plus GINA Client (1), Access Manager Plus (10), Active Directory 360 (1), Analytics Plus (3), AppManager (1), Application Control Plus (4), Application Manager (5), Applications Manager (46), Asset Explorer (7), AssetExplorer (13), Asset Explorer Agent (3), Books - Accounting App (1), Browser Security Plus (1), CRM Lead Magnet Plugin (1), CloudSecurityPlus (1), Cloud Security Plus (1), DataSecurity Plus (4), Desktop Central (47), DesktopCentral (2), Desktop Central MSP (3), Device Control Plus (3), Device Expert (1), Endpoint Central (1), Endpoint Central MSP (1), Endpoint DLP (1), EventLog Analyzer (14), Event Log Analyzer (3), Exchange Reporter Plus (4), FireWall (1), Firewall Analyzer (12), Key Manager Plus (4), Log360 (6), Log Analyzer (2), M365 Manager Plus (2), ManageEngine (2), Manage Engine Desktop Central (1), ManageEngine Log360 (1), ManageEngine Netflow Analyzer (4), ManageEngine OpManager (13), ManageEngine OpUtils (1), ManageEngine PAM360 (2), Mobile Device Manager Plus (2), Monitoring Manager (3), NetFlow Analyzer (5), Netflow Analyzer (10), Netflow Analyzer Professional (7), Network Configuration Manager (11), O365 Manager Plus (2), OPManager (2), OS Deployer (1), OpManager (45), OpManager MSP (3), OpManager Plus (3), OpStor (2), OpUtils (7), PAM 360 (1), PAM360 (6), Password Manager Pro (30), Patch Connect Plus (2), Patch Manager Plus (2), Recovery Manager Plus (2), Remote Access Plus (10), Remote Access Plus Server (3), Remote Monitoring and Management (1), SalesIQ (2), ServiceDesk (3), Service Desk Plus (1), ServiceDesk Plus (51), ServiceDesk Plus MSP (13), Service Plus (1), SharePoint Manager Plus (2), Site24x7 Mobile Network Poller (1), Support Center Plus (4), SupportCenter Plus (14), Vulnerability Manager Plus (2), WebNMS Framework (4), and SupportCenter Plus (1)

Link to Vendor Website: https://www.manageengine.com/

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-03-118.58.5Zoho ManageEngine Desktop Central 权限升级Endpoint Management SoftwareNot DefinedNot Defined0.000430.03CVE-2024-2370
2024-02-167.37.1Zoho ManageEngine Exchange Reporter Plus Report Exporting SQL注入Reporting SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-21775
2024-02-027.87.7Zoho ManageEngine ADAudit Plus File-Summary DrillDown SQL注入未知Not DefinedOfficial Fix0.005380.05CVE-2024-0269
2024-02-027.87.7Zoho ManageEngine ADAudit Plus Home Graph-Data SQL注入未知Not DefinedOfficial Fix0.005380.06CVE-2024-0253
2024-02-027.67.6Zoho ManageEngine ADAudit Plus Aggregate Report SQL注入未知Not DefinedNot Defined0.077290.04CVE-2023-48793
2024-02-027.67.6Zoho ManageEngine ADAudit Plus SQL注入未知Not DefinedNot Defined0.077290.00CVE-2023-48792
2024-01-252.52.5Zoho ManageEngine ADAudit Plus 目录遍历未知Not DefinedOfficial Fix0.000690.03CVE-2023-50785
2024-01-184.44.4Zoho ManageEngine ServiceDesk Plus MSP Task Name 跨网站脚本未知Not DefinedOfficial Fix0.007330.02CVE-2023-49943
2024-01-119.39.1Zoho ManageEngine ADSelfService Plus Load Balancer Privilege Escalation未知Not DefinedOfficial Fix0.001350.07CVE-2024-0252
2024-01-087.77.7Zoho ManageEngine OpManager HTTP Request uploadMib 目录遍历Network Management SoftwareNot DefinedNot Defined0.001640.04CVE-2023-47211
2023-11-225.75.6Zoho ManageEngine Recovery Manager Plus Proxy Setting Privilege Escalation未知Not DefinedOfficial Fix0.005070.00CVE-2023-48646
2023-11-164.44.3Zoho ManageEngine Service Desk Plus Encryption Key 信息公开Access Management SoftwareNot DefinedOfficial Fix0.000420.01CVE-2023-6105
2023-11-036.76.7Zoho ManageEngine Desktop Central HTTP Request smtpConfig.do 权限升级Endpoint Management SoftwareNot DefinedNot Defined0.003860.00CVE-2023-4769
2023-11-035.25.2Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.pdf 权限升级Endpoint Management SoftwareNot DefinedNot Defined0.004640.02CVE-2023-4768
2023-11-035.25.2Zoho ManageEngine Desktop Central HTTP Response InvSWMetering.csv 权限升级Endpoint Management SoftwareNot DefinedNot Defined0.004640.00CVE-2023-4767
2023-09-275.55.3Zoho ManageEngine ADManager Plus REST API 弱身份验证未知Not DefinedOfficial Fix0.014120.04CVE-2023-41904
2023-09-125.75.6Zoho ManageEngine ADManager Plus Privilege Escalation未知Not DefinedOfficial Fix0.001130.00CVE-2023-38743
2023-09-013.63.6Zoho ManageEngine ADManager Plus 目录遍历未知Not DefinedNot Defined0.001010.03CVE-2023-39912
2023-08-297.67.6Zoho ManageEngine ADManager Plus 2FA 弱身份验证未知Not DefinedNot Defined0.025510.06CVE-2023-35785
2023-08-185.45.3Zoho ManageEngine ADManager Plus Build 权限升级未知Not DefinedNot Defined0.000600.02CVE-2023-31492
2023-08-114.84.7Zoho ManageEngine Password Manager Pro Query Report 跨网站脚本未知Not DefinedOfficial Fix0.000970.00CVE-2020-27449
2023-08-114.84.8Zoho ManageEngine Applications Manager 跨网站脚本Log Management SoftwareNot DefinedNot Defined0.005220.03CVE-2023-38333
2023-08-076.56.5Zoho ManageEngine ADAudit Plus Event Analysis 权限升级未知Not DefinedNot Defined0.031550.00CVE-2023-32783
2023-08-045.05.0Zoho ManageEngine ADManager Plus 信息公开未知Not DefinedNot Defined0.000480.00CVE-2023-38332
2023-08-045.85.8Zoho ManageEngine Network Configuration Manager WebSocket Endpoint 信息公开未知Not DefinedNot Defined0.001340.06CVE-2023-29505

470 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 470 results.

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!