Known Exploited Vulnerabilities January 23, 2023 · CISA KEV Catalog

CVE-2022-47966: Zoho Manage Engine Multiple Products Remote Code Execution Vulnerability

Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-47966 Zoho
Related: CVE-2022-28810: Zoho Manage Engine ADSelf Service Plus Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 07, 2023
CVE-2022-35405: Zoho Manage Engine Multiple Products Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Sep 22, 2022
CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021