Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus

🗓️ 23 Jan 2023 15:49:10Reported by vonahisecType 
githubexploit
 githubexploit🔗 github.com👁 569 Views

CVE-2022-47966 critical remote code execution vulnerability affects 24 ManageEngine products, requires SAML SSO, discovered by Khoadha, and exploited in the wild

Related
ReporterTitlePublishedViews
Family
0day.today		Zoho ManageEngine ServiceDesk Plus 14003 Remote Code Execution Exploit
7 Feb 202300:00
–zdt
0day.today		ManageEngine ADSelfService Plus Unauthenticated SAML Remote Code Execution Exploit
13 Feb 202300:00
–zdt
0day.today		Zoho ManageEngine Endpoint Central / MSP 10.1.2228.10 Remote Code Execution Exploit
13 Feb 202300:00
–zdt
GithubExploit		Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus
23 Jan 202310:45
–githubexploit
GithubExploit		Exploit for Improper Input Validation in Zohocorp Manageengine_Access_Manager_Plus
17 Jan 202321:26
–githubexploit
ICS		Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475
7 Sep 202312:00
–ics
ICS		North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
25 Jul 202412:00
–ics
ATTACKERKB		CVE-2022-47966
18 Jan 202318:15
–attackerkb
BDU FSTEC		The vulnerability of ManageEngine’s software products is related to errors in processing input data, which allow attackers to execute arbitrary code.
18 Jan 202300:00
–bdu_fstec
Circl		CVE-2022-47966
13 Jan 202319:02
–circl
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Jan 2025 06:20Current
9.7High risk
Vulners AI Score9.7
CVSS 3.19.8
EPSS0.99753
cve-2022-47966remote code executionmanageenginesaml ssokhoadhaexploitationvulnerabilityscanner
569