ManageEngine ServiceDesk Plus < 14.0 Build 14004 RCE

A remote code execution vulnerability exists in ManageEngine ServiceDesk Plus prior to 14.0 Build 14004 due to use of Apache xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and...

CVE-2022-47966

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain...

多款ZOHO ManageEngine产品安全漏洞

ZOHO ManageEngine ADAudit Plus and ZOHO ManageEngine Access Manager Plus are both products of ZOHO, Inc. ZOHO ManageEngine ADAudit Plus is designed to simplify auditing, prove compliance and detect threats. zoho ManageEngine Access Manager Plus is a privileged session management solution for...