Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2022-47966

🗓️ 18 Jan 2023 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1330 Views🌐 WEB

CVE-2022-47966: Zoho ManageEngine on-premise products RCE via Apache Santuario xmlsec 1.4.1

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
zdt
zdt		Zoho ManageEngine ServiceDesk Plus 14003 Remote Code Execution Exploit
7 Feb 202300:00
–zdt
zdt
zdt		ManageEngine ADSelfService Plus Unauthenticated SAML Remote Code Execution Exploit
13 Feb 202300:00
–zdt
zdt
zdt		Zoho ManageEngine Endpoint Central / MSP 10.1.2228.10 Remote Code Execution Exploit
13 Feb 202300:00
–zdt
githubexploit
GithubExploit		Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus
23 Jan 202315:49
–githubexploit
githubexploit
GithubExploit		Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus
23 Jan 202310:45
–githubexploit
githubexploit
GithubExploit		Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus
17 Jan 202321:26
–githubexploit
ics
ICS		Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475
7 Sep 202312:00
–ics
ics
ICS		North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
25 Jul 202412:00
–ics
attackerkb
ATTACKERKB		CVE-2022-47966
18 Jan 202318:15
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of ManageEngine’s software products is related to errors in processing input data, which allow attackers to execute arbitrary code.
18 Jan 202300:00
–bdu_fstec
Rows per page
NVD
Node
OR
zohocorpmanageengine_access_manager_plusRange<4.3
zohocorpmanageengine_access_manager_plusMatch4.3build4300
zohocorpmanageengine_access_manager_plusMatch4.3build4301
zohocorpmanageengine_access_manager_plusMatch4.3build4302
zohocorpmanageengine_access_manager_plusMatch4.3build4303
zohocorpmanageengine_access_manager_plusMatch4.3build4304
zohocorpmanageengine_access_manager_plusMatch4.3build4305
zohocorpmanageengine_access_manager_plusMatch4.3build4306
zohocorpmanageengine_access_manager_plusMatch4.3build4307
Node
OR
zohocorpmanageengine_ad360Range<4.3
zohocorpmanageengine_ad360Match4.34300
zohocorpmanageengine_ad360Match4.34302
zohocorpmanageengine_ad360Match4.34303
zohocorpmanageengine_ad360Match4.34304
zohocorpmanageengine_ad360Match4.34305
zohocorpmanageengine_ad360Match4.34306
zohocorpmanageengine_ad360Match4.34308
zohocorpmanageengine_ad360Match4.34309
Node
OR
zohocorpmanageengine_adaudit_plusRange<7.0
zohocorpmanageengine_adaudit_plusMatch7.07000
zohocorpmanageengine_adaudit_plusMatch7.07002
zohocorpmanageengine_adaudit_plusMatch7.07003
zohocorpmanageengine_adaudit_plusMatch7.07004
zohocorpmanageengine_adaudit_plusMatch7.07005
zohocorpmanageengine_adaudit_plusMatch7.07006
zohocorpmanageengine_adaudit_plusMatch7.07007
zohocorpmanageengine_adaudit_plusMatch7.07008
zohocorpmanageengine_adaudit_plusMatch7.07050
zohocorpmanageengine_adaudit_plusMatch7.07051
zohocorpmanageengine_adaudit_plusMatch7.07052
zohocorpmanageengine_adaudit_plusMatch7.07053
zohocorpmanageengine_adaudit_plusMatch7.07054
zohocorpmanageengine_adaudit_plusMatch7.07055
zohocorpmanageengine_adaudit_plusMatch7.07060
zohocorpmanageengine_adaudit_plusMatch7.07062
zohocorpmanageengine_adaudit_plusMatch7.07063
zohocorpmanageengine_adaudit_plusMatch7.07065
zohocorpmanageengine_adaudit_plusMatch7.07080
Node
OR
zohocorpmanageengine_admanager_plusRange<7.1
zohocorpmanageengine_admanager_plusMatch7.17100
zohocorpmanageengine_admanager_plusMatch7.17101
zohocorpmanageengine_admanager_plusMatch7.17102
zohocorpmanageengine_admanager_plusMatch7.17110
zohocorpmanageengine_admanager_plusMatch7.17111
zohocorpmanageengine_admanager_plusMatch7.17112
zohocorpmanageengine_admanager_plusMatch7.17113
zohocorpmanageengine_admanager_plusMatch7.17114
zohocorpmanageengine_admanager_plusMatch7.17115
zohocorpmanageengine_admanager_plusMatch7.17116
zohocorpmanageengine_admanager_plusMatch7.17117
zohocorpmanageengine_admanager_plusMatch7.17118
zohocorpmanageengine_admanager_plusMatch7.17120
zohocorpmanageengine_admanager_plusMatch7.17121
zohocorpmanageengine_admanager_plusMatch7.17122
zohocorpmanageengine_admanager_plusMatch7.17123
zohocorpmanageengine_admanager_plusMatch7.17124
zohocorpmanageengine_admanager_plusMatch7.17125
zohocorpmanageengine_admanager_plusMatch7.17126
zohocorpmanageengine_admanager_plusMatch7.17130
zohocorpmanageengine_admanager_plusMatch7.17131
zohocorpmanageengine_admanager_plusMatch7.17140
zohocorpmanageengine_admanager_plusMatch7.17141
zohocorpmanageengine_admanager_plusMatch7.17150
zohocorpmanageengine_admanager_plusMatch7.17151
zohocorpmanageengine_admanager_plusMatch7.17160
zohocorpmanageengine_admanager_plusMatch7.17161
Node
OR
zohocorpmanageengine_adselfservice_plusRange<6.2
zohocorpmanageengine_adselfservice_plusMatch6.26200
zohocorpmanageengine_adselfservice_plusMatch6.26201
zohocorpmanageengine_adselfservice_plusMatch6.26202
zohocorpmanageengine_adselfservice_plusMatch6.26203
zohocorpmanageengine_adselfservice_plusMatch6.26204
zohocorpmanageengine_adselfservice_plusMatch6.26205
zohocorpmanageengine_adselfservice_plusMatch6.26206
zohocorpmanageengine_adselfservice_plusMatch6.26207
zohocorpmanageengine_adselfservice_plusMatch6.26208
zohocorpmanageengine_adselfservice_plusMatch6.26209
zohocorpmanageengine_adselfservice_plusMatch6.26210
Node
OR
zohocorpmanageengine_analytics_plusRange<5.1
zohocorpmanageengine_analytics_plusMatch5.15100
zohocorpmanageengine_analytics_plusMatch5.15110
zohocorpmanageengine_analytics_plusMatch5.15120
zohocorpmanageengine_analytics_plusMatch5.15121
zohocorpmanageengine_analytics_plusMatch5.15130
zohocorpmanageengine_analytics_plusMatch5.15140
Node
OR
zohocorpmanageengine_assetexplorerRange<6.9
zohocorpmanageengine_assetexplorerMatch6.96900
zohocorpmanageengine_assetexplorerMatch6.96901
zohocorpmanageengine_assetexplorerMatch6.96902
zohocorpmanageengine_assetexplorerMatch6.96903
zohocorpmanageengine_assetexplorerMatch6.96904
zohocorpmanageengine_assetexplorerMatch6.96905
zohocorpmanageengine_assetexplorerMatch6.96906
zohocorpmanageengine_assetexplorerMatch6.96907
zohocorpmanageengine_assetexplorerMatch6.96908
zohocorpmanageengine_assetexplorerMatch6.96909
zohocorpmanageengine_assetexplorerMatch6.96950
zohocorpmanageengine_assetexplorerMatch6.96951
zohocorpmanageengine_assetexplorerMatch6.96952
zohocorpmanageengine_assetexplorerMatch6.96953
zohocorpmanageengine_assetexplorerMatch6.96954
zohocorpmanageengine_assetexplorerMatch6.96955
zohocorpmanageengine_assetexplorerMatch6.96956
zohocorpmanageengine_assetexplorerMatch6.96957
zohocorpmanageengine_assetexplorerMatch6.96970
zohocorpmanageengine_assetexplorerMatch6.96971
zohocorpmanageengine_assetexplorerMatch6.96972
zohocorpmanageengine_assetexplorerMatch6.96973
zohocorpmanageengine_assetexplorerMatch6.96974
zohocorpmanageengine_assetexplorerMatch6.96975
zohocorpmanageengine_assetexplorerMatch6.96976
zohocorpmanageengine_assetexplorerMatch6.96977
zohocorpmanageengine_assetexplorerMatch6.96978
zohocorpmanageengine_assetexplorerMatch6.96979
zohocorpmanageengine_assetexplorerMatch6.96980
zohocorpmanageengine_assetexplorerMatch6.96981
zohocorpmanageengine_assetexplorerMatch6.96982
Node
OR
zohocorpmanageengine_key_manager_plusRange<6.4
zohocorpmanageengine_key_manager_plusMatch6.46400
Node
OR
zohocorpmanageengine_pam360Range<5.7
zohocorpmanageengine_pam360Match5.7build5700
zohocorpmanageengine_pam360Match5.7build5710
zohocorpmanageengine_pam360Match5.7build5711
zohocorpmanageengine_pam360Match5.7build5712
Node
OR
zohocorpmanageengine_password_manager_proRange<12.1
zohocorpmanageengine_password_manager_proMatch12.1build12100
zohocorpmanageengine_password_manager_proMatch12.1build12101
zohocorpmanageengine_password_manager_proMatch12.1build12110
zohocorpmanageengine_password_manager_proMatch12.1build12120
zohocorpmanageengine_password_manager_proMatch12.1build12121
zohocorpmanageengine_password_manager_proMatch12.1build12122
zohocorpmanageengine_password_manager_proMatch12.1build12123
Node
OR
zohocorpmanageengine_servicedesk_plusRange<14.0
zohocorpmanageengine_servicedesk_plusMatch14.014000
zohocorpmanageengine_servicedesk_plusMatch14.014001
zohocorpmanageengine_servicedesk_plusMatch14.014002
zohocorpmanageengine_servicedesk_plusMatch14.014003
Node
OR
zohocorpmanageengine_servicedesk_plus_mspRange<13.0
zohocorpmanageengine_servicedesk_plus_mspMatch13.013000
Node
OR
zohocorpmanageengine_supportcenter_plusMatch11.011017
zohocorpmanageengine_supportcenter_plusMatch11.011018
zohocorpmanageengine_supportcenter_plusMatch11.011019
zohocorpmanageengine_supportcenter_plusMatch11.011020
zohocorpmanageengine_supportcenter_plusMatch11.011021
zohocorpmanageengine_supportcenter_plusMatch11.011022
zohocorpmanageengine_supportcenter_plusMatch11.011024
zohocorpmanageengine_supportcenter_plusMatch11.011025
Node
OR
zohocorpmanageengine_application_control_plusRange<10.1.2220.18
zohocorpmanageengine_browser_security_plusRange<11.1.2238.6
zohocorpmanageengine_device_control_plusRange<10.1.2220.18
zohocorpmanageengine_endpoint_dlp_plusRange<10.1.2137.6
zohocorpmanageengine_os_deployerRange<1.1.2243.1
zohocorpmanageengine_patch_manager_plusRange<10.1.2220.18
zohocorpmanageengine_remote_access_plusRange<10.1.2228.11
zohocorpmanageengine_remote_monitoring_and_management_centralRange<10.1.41
zohocorpmanageengine_vulnerability_manager_plusRange<10.1.2220.18
SourceLink
horizon3www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/
cisawww.cisa.gov/news-events/cybersecurity-advisories/aa23-250a
packetstormsecuritywww.packetstormsecurity.com/files/170943/Zoho-ManageEngine-Endpoint-Central-MSP-10.1.2228.10-Remote-Code-Execution.html
manageenginewww.manageengine.com/security/advisory/CVE/cve-2022-47966.html
blogwww.blog.viettelcybersecurity.com/saml-show-stopper/
githubwww.github.com/apache/santuario-xml-security-java/tags
packetstormsecuritywww.packetstormsecurity.com/files/170882/Zoho-ManageEngine-ServiceDesk-Plus-14003-Remote-Code-Execution.html
githubwww.github.com/horizon3ai/CVE-2022-47966
attackerkbwww.attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis
packetstormsecuritywww.packetstormsecurity.com/files/170925/ManageEngine-ADSelfService-Plus-Unauthenticated-SAML-Remote-Code-Execution.html
Rows per page
ParameterPositionPathDescriptionCWE
SAMLResponserequest bodySamlResponseServletUnauthenticated remote code execution via crafted SAMLResponse to the SAML endpoint (SamlResponseServlet) leveraging XML security library flaw.CWE-20

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 05:14Current
9.8High risk
Vulners AI Score9.8
CVSS 3.19.8
EPSS0.99753
SSVC
CWE-20In Wild
cve-2022-47966zoho manageenginerceapache santuario xmlsecxml security for javasaml ssosecurity vulnerability
1330