4 matches found
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
6.5CVSS6.7AI score0.0192EPSS
SaveExploits1References1
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
6.5CVSS5.8AI score0.0192EPSS
SaveExploits1References1
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any user's login password...
6.5CVSS6.6AI score0.0192EPSS
SaveExploits1References2
CVE-2022-23863
Zoho ManageEngine Desktop Central before 10.1.2137.10 is affected by a privilege-escalation flaw in the ChangeAmazonPasswordServlet. An authenticated, low-privilege user can change other users’ passwords, potentially compromising higher-privilege accounts. The vulnerability is documented across m...
6.5CVSS6.3AI score0.0192EPSS
SaveExploits1References1Affected Software1
20