Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

CVE-2022-47966

🗓️ 18 Jan 2023 18:10:15Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 732 Views🌐 21 Media mentions

CVE-2022-47966: Zoho ManageEngine on-premise products RCE via Apache Santuario xmlsec 1.4.1

Show more
Related
Detection
Refs
Social
ReporterTitlePublishedViews
Family
Hive Pro Threat Advisories		A Critical Vulnerability That Affects ManageEngine Products
17 Jan 202309:59
–hivepro
Hive Pro Threat Advisories		Actors, Threats and Vulnerabilities 16 January 2023 – 22 January 2023
25 Jan 202303:14
–hivepro
The Hacker News		Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine Products
23 Feb 202315:02
–thn
The Hacker News		Zoho ManageEngine PoC Exploit to be Released Soon - Patch Before It's Too Late!
17 Jan 202310:38
–thn
The Hacker News		Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware
24 Aug 202315:16
–thn
The Hacker News		Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems
19 Apr 202306:42
–thn
The Hacker News		Iranian Nation-State Actors Employ Password Spray Attacks Targeting Multiple Sectors
15 Sep 202304:14
–thn
The Hacker News		 CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities
8 Sep 202305:36
–thn
The Hacker News		Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code
25 May 202310:40
–thn
Packet Storm		Zoho ManageEngine ServiceDesk Plus 14003 Remote Code Execution
7 Feb 202300:00
–packetstorm
Rows per page
Nvd
Node
zohocorpmanageengine_access_manager_plusRange<4.3
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4300
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4301
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4302
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4303
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4304
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4305
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4306
OR
zohocorpmanageengine_access_manager_plusMatch4.3build4307
Node
zohocorpmanageengine_ad360Range<4.3
OR
zohocorpmanageengine_ad360Match4.34300
OR
zohocorpmanageengine_ad360Match4.34302
OR
zohocorpmanageengine_ad360Match4.34303
OR
zohocorpmanageengine_ad360Match4.34304
OR
zohocorpmanageengine_ad360Match4.34305
OR
zohocorpmanageengine_ad360Match4.34306
OR
zohocorpmanageengine_ad360Match4.34308
OR
zohocorpmanageengine_ad360Match4.34309
Node
zohocorpmanageengine_adaudit_plusRange<7.0
OR
zohocorpmanageengine_adaudit_plusMatch7.07000
OR
zohocorpmanageengine_adaudit_plusMatch7.07002
OR
zohocorpmanageengine_adaudit_plusMatch7.07003
OR
zohocorpmanageengine_adaudit_plusMatch7.07004
OR
zohocorpmanageengine_adaudit_plusMatch7.07005
OR
zohocorpmanageengine_adaudit_plusMatch7.07006
OR
zohocorpmanageengine_adaudit_plusMatch7.07007
OR
zohocorpmanageengine_adaudit_plusMatch7.07008
OR
zohocorpmanageengine_adaudit_plusMatch7.07050
OR
zohocorpmanageengine_adaudit_plusMatch7.07051
OR
zohocorpmanageengine_adaudit_plusMatch7.07052
OR
zohocorpmanageengine_adaudit_plusMatch7.07053
OR
zohocorpmanageengine_adaudit_plusMatch7.07054
OR
zohocorpmanageengine_adaudit_plusMatch7.07055
OR
zohocorpmanageengine_adaudit_plusMatch7.07060
OR
zohocorpmanageengine_adaudit_plusMatch7.07062
OR
zohocorpmanageengine_adaudit_plusMatch7.07063
OR
zohocorpmanageengine_adaudit_plusMatch7.07065
OR
zohocorpmanageengine_adaudit_plusMatch7.07080
Node
zohocorpmanageengine_admanager_plusRange<7.1
OR
zohocorpmanageengine_admanager_plusMatch7.17100
OR
zohocorpmanageengine_admanager_plusMatch7.17101
OR
zohocorpmanageengine_admanager_plusMatch7.17102
OR
zohocorpmanageengine_admanager_plusMatch7.17110
OR
zohocorpmanageengine_admanager_plusMatch7.17111
OR
zohocorpmanageengine_admanager_plusMatch7.17112
OR
zohocorpmanageengine_admanager_plusMatch7.17113
OR
zohocorpmanageengine_admanager_plusMatch7.17114
OR
zohocorpmanageengine_admanager_plusMatch7.17115
OR
zohocorpmanageengine_admanager_plusMatch7.17116
OR
zohocorpmanageengine_admanager_plusMatch7.17117
OR
zohocorpmanageengine_admanager_plusMatch7.17118
OR
zohocorpmanageengine_admanager_plusMatch7.17120
OR
zohocorpmanageengine_admanager_plusMatch7.17121
OR
zohocorpmanageengine_admanager_plusMatch7.17122
OR
zohocorpmanageengine_admanager_plusMatch7.17123
OR
zohocorpmanageengine_admanager_plusMatch7.17124
OR
zohocorpmanageengine_admanager_plusMatch7.17125
OR
zohocorpmanageengine_admanager_plusMatch7.17126
OR
zohocorpmanageengine_admanager_plusMatch7.17130
OR
zohocorpmanageengine_admanager_plusMatch7.17131
OR
zohocorpmanageengine_admanager_plusMatch7.17140
OR
zohocorpmanageengine_admanager_plusMatch7.17141
OR
zohocorpmanageengine_admanager_plusMatch7.17150
OR
zohocorpmanageengine_admanager_plusMatch7.17151
OR
zohocorpmanageengine_admanager_plusMatch7.17160
OR
zohocorpmanageengine_admanager_plusMatch7.17161
Node
zohocorpmanageengine_adselfservice_plusRange<6.2
OR
zohocorpmanageengine_adselfservice_plusMatch6.26200
OR
zohocorpmanageengine_adselfservice_plusMatch6.26201
OR
zohocorpmanageengine_adselfservice_plusMatch6.26202
OR
zohocorpmanageengine_adselfservice_plusMatch6.26203
OR
zohocorpmanageengine_adselfservice_plusMatch6.26204
OR
zohocorpmanageengine_adselfservice_plusMatch6.26205
OR
zohocorpmanageengine_adselfservice_plusMatch6.26206
OR
zohocorpmanageengine_adselfservice_plusMatch6.26207
OR
zohocorpmanageengine_adselfservice_plusMatch6.26208
OR
zohocorpmanageengine_adselfservice_plusMatch6.26209
OR
zohocorpmanageengine_adselfservice_plusMatch6.26210
Node
zohocorpmanageengine_analytics_plusRange<5.1
OR
zohocorpmanageengine_analytics_plusMatch5.15100
OR
zohocorpmanageengine_analytics_plusMatch5.15110
OR
zohocorpmanageengine_analytics_plusMatch5.15120
OR
zohocorpmanageengine_analytics_plusMatch5.15121
OR
zohocorpmanageengine_analytics_plusMatch5.15130
OR
zohocorpmanageengine_analytics_plusMatch5.15140
Node
zohocorpmanageengine_assetexplorerRange<6.9
OR
zohocorpmanageengine_assetexplorerMatch6.96900
OR
zohocorpmanageengine_assetexplorerMatch6.96901
OR
zohocorpmanageengine_assetexplorerMatch6.96902
OR
zohocorpmanageengine_assetexplorerMatch6.96903
OR
zohocorpmanageengine_assetexplorerMatch6.96904
OR
zohocorpmanageengine_assetexplorerMatch6.96905
OR
zohocorpmanageengine_assetexplorerMatch6.96906
OR
zohocorpmanageengine_assetexplorerMatch6.96907
OR
zohocorpmanageengine_assetexplorerMatch6.96908
OR
zohocorpmanageengine_assetexplorerMatch6.96909
OR
zohocorpmanageengine_assetexplorerMatch6.96950
OR
zohocorpmanageengine_assetexplorerMatch6.96951
OR
zohocorpmanageengine_assetexplorerMatch6.96952
OR
zohocorpmanageengine_assetexplorerMatch6.96953
OR
zohocorpmanageengine_assetexplorerMatch6.96954
OR
zohocorpmanageengine_assetexplorerMatch6.96955
OR
zohocorpmanageengine_assetexplorerMatch6.96956
OR
zohocorpmanageengine_assetexplorerMatch6.96957
OR
zohocorpmanageengine_assetexplorerMatch6.96970
OR
zohocorpmanageengine_assetexplorerMatch6.96971
OR
zohocorpmanageengine_assetexplorerMatch6.96972
OR
zohocorpmanageengine_assetexplorerMatch6.96973
OR
zohocorpmanageengine_assetexplorerMatch6.96974
OR
zohocorpmanageengine_assetexplorerMatch6.96975
OR
zohocorpmanageengine_assetexplorerMatch6.96976
OR
zohocorpmanageengine_assetexplorerMatch6.96977
OR
zohocorpmanageengine_assetexplorerMatch6.96978
OR
zohocorpmanageengine_assetexplorerMatch6.96979
OR
zohocorpmanageengine_assetexplorerMatch6.96980
OR
zohocorpmanageengine_assetexplorerMatch6.96981
OR
zohocorpmanageengine_assetexplorerMatch6.96982
Node
zohocorpmanageengine_key_manager_plusRange<6.4
OR
zohocorpmanageengine_key_manager_plusMatch6.46400
Node
zohocorpmanageengine_pam360Range<5.7
OR
zohocorpmanageengine_pam360Match5.7build5700
OR
zohocorpmanageengine_pam360Match5.7build5710
OR
zohocorpmanageengine_pam360Match5.7build5711
OR
zohocorpmanageengine_pam360Match5.7build5712
Node
zohocorpmanageengine_password_manager_proRange<12.1
OR
zohocorpmanageengine_password_manager_proMatch12.1build12100
OR
zohocorpmanageengine_password_manager_proMatch12.1build12101
OR
zohocorpmanageengine_password_manager_proMatch12.1build12110
OR
zohocorpmanageengine_password_manager_proMatch12.1build12120
OR
zohocorpmanageengine_password_manager_proMatch12.1build12121
OR
zohocorpmanageengine_password_manager_proMatch12.1build12122
OR
zohocorpmanageengine_password_manager_proMatch12.1build12123
Node
zohocorpmanageengine_servicedesk_plusRange<14.0
OR
zohocorpmanageengine_servicedesk_plusMatch14.014000
OR
zohocorpmanageengine_servicedesk_plusMatch14.014001
OR
zohocorpmanageengine_servicedesk_plusMatch14.014002
OR
zohocorpmanageengine_servicedesk_plusMatch14.014003
Node
zohocorpmanageengine_servicedesk_plus_mspRange<13.0
OR
zohocorpmanageengine_servicedesk_plus_mspMatch13.013000
Node
zohocorpmanageengine_supportcenter_plusMatch11.011017
OR
zohocorpmanageengine_supportcenter_plusMatch11.011018
OR
zohocorpmanageengine_supportcenter_plusMatch11.011019
OR
zohocorpmanageengine_supportcenter_plusMatch11.011020
OR
zohocorpmanageengine_supportcenter_plusMatch11.011021
OR
zohocorpmanageengine_supportcenter_plusMatch11.011022
OR
zohocorpmanageengine_supportcenter_plusMatch11.011024
OR
zohocorpmanageengine_supportcenter_plusMatch11.011025
Node
zohocorpmanageengine_application_control_plusRange<10.1.220.18
OR
zohocorpmanageengine_browser_security_plusRange<11.1.2238.6
OR
zohocorpmanageengine_device_control_plusRange<10.1.2220.18
OR
zohocorpmanageengine_endpoint_dlp_plusRange<10.1.2137.6
OR
zohocorpmanageengine_os_deployerRange<1.1.2243.1
OR
zohocorpmanageengine_patch_manager_plusRange<10.1.2220.18
OR
zohocorpmanageengine_remote_access_plusRange<10.1.2228.11
OR
zohocorpmanageengine_remote_monitoring_and_management_centralRange<10.1.41
OR
zohocorpmanageengine_vulnerability_manager_plusRange<10.1.2220.18
SourceLink
cisawww.cisa.gov/news-events/cybersecurity-advisories/aa23-250a
horizon3www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/
packetstormsecuritywww.packetstormsecurity.com/files/170925/ManageEngine-ADSelfService-Plus-Unauthenticated-SAML-Remote-Code-Execution.html
blogwww.blog.viettelcybersecurity.com/saml-show-stopper/
packetstormsecuritywww.packetstormsecurity.com/files/170882/Zoho-ManageEngine-ServiceDesk-Plus-14003-Remote-Code-Execution.html
manageenginewww.manageengine.com/security/advisory/CVE/cve-2022-47966.html
githubwww.github.com/apache/santuario-xml-security-java/tags
attackerkbwww.attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis
githubwww.github.com/horizon3ai/CVE-2022-47966
packetstormsecuritywww.packetstormsecurity.com/files/170943/Zoho-ManageEngine-Endpoint-Central-MSP-10.1.2228.10-Remote-Code-Execution.html
Rows per page

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
18 Jan 2023 18:15Current
9.8High risk
Vulners AI Score9.8
CVSS39.8
EPSS0.975
CWE-20In Wild
cve-2022-47966zoho manageenginerceapache santuario xmlsecxml security for javasaml ssosecurity vulnerability
732
.json
Report