CVE-2022-47966

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.

CISA Known Exploited Vulnerability

Vendor / Product Zoho — ManageEngine

Date Added 2023-01-23

Remediation Due 2023-02-13

Ransomware Use CONFIRMED

https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html; https://nvd.nist.gov/vuln/detail/CVE-2022-47966

Weakness Classification (1)

CWE-20

Affected Software (156)

Vendor	Product	Version
zohocorp	manageengine_access_manager_plus	< 4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_access_manager_plus	4.3
zohocorp	manageengine_ad360	< 4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_ad360	4.3
zohocorp	manageengine_adaudit_plus	< 7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0
zohocorp	manageengine_adaudit_plus	7.0