Zoho
9 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2022-35405 |
ManageEngine | — | 0.9987 | 2022-09-22 | 2022-10-13 | Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain | |
CVE-2022-47966 |
ManageEngine | — | 0.9975 | 2023-01-23 | 2023-02-13 | RW | Multiple Zoho ManageEngine products contain an unauthenticated remote code execu |
CVE-2022-28810 |
ManageEngine | — | 0.7097 | 2023-03-07 | 2023-03-28 | Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allow | |
CVE-2021-44515 |
Desktop Central | — | — | 2021-12-10 | 2021-12-24 | Zoho Desktop Central contains an authentication bypass vulnerability that could | |
CVE-2021-37415 |
ManageEngine ServiceDesk Plus (SDP) | — | — | 2021-12-01 | 2021-12-15 | Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication | |
CVE-2021-44077 |
ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | — | — | 2021-12-01 | 2021-12-15 | Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 105 | |
CVE-2021-40539 |
ManageEngine | — | — | 2021-11-03 | 2021-11-17 | RW | Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerabi |
CVE-2020-10189 |
ManageEngine | — | — | 2021-11-03 | 2022-05-03 | Zoho ManageEngine Desktop Central contains a file upload vulnerability that allo | |
CVE-2019-8394 |
ManageEngine | — | — | 2021-11-03 | 2022-05-03 | Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability t |