Manageengine Key Manager Plus Security Vulnerabilities and Issues — Manageengine Key Manager Plus CVE List

ZohocorpManageengine Key Manager Plus

5 matches found

CVE•added 2023/01/18 12:00 a.m.•1373 views

CVE-2022-47966

CVE-2022-47966 (ManageEngine products) is a pre-auth remote code execution vulnerability rooted in the Apache Santuario (XML Security for Java) 1.4.1 library. The XML signature processing in this version can bypass protections, enabling RCE when a SAML SSO flow is engaged by affected ManageEngine...

9.8CVSS9.8AI score0.99753EPSS

SaveIn wildWeb

CVE•added 2019/06/18 9:27 p.m.•156 views

CVE-2019-12133

CVE-2019-12133 affects multiple Zoho ManageEngine products (Desktop Central, EventLog Analyzer, ServiceDesk Plus, SupportCenter Plus, O365 Manager Plus, Mobile Device Manager Plus, Patch Connect Plus, Vulnerability Manager Plus, Patch Manager Plus, OpManager, NetFlow Analyzer, OpUtils, Network Co...

7.8CVSS8AI score0.01724EPSS

Save

CVE•added 2022/03/01 2:01 a.m.•102 views

CVE-2022-24446

The CVE-2022-24446 entry concerns Zoho ManageEngine Key Manager Plus 6.1.6, where a user with Operator privileges can view all SSH servers and related user information regardless of associations. The connected documents confirm the affected software and the underlying issue as an access-control w...

4.3CVSS4.6AI score0.00939EPSS

Save

CVE•added 2022/03/02 2:41 p.m.•99 views

CVE-2022-24447

CVE-2022-24447 affects Zoho ManageEngine Key Manager Plus

6.5CVSS6.3AI score0.00807EPSS

Save

CVE•added 2021/06/07 9:45 a.m.•53 views

CVE-2021-28382

Zoho ManageEngine Key Manager Plus (before 6001) exposes a Stored XSS vulnerability on the user-management page when importing malicious user details from Active Directory. Affects the product in versions prior to 6001. Remediation: upgrade to version 6001 or later per release notes.

5.4CVSS5.2AI score0.01165EPSS

Save