{"resultsPerPage":50,"startIndex":0,"totalResults":50,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-15T01:14:55.523","vulnerabilities":[{"cve":{"id":"CVE-2010-5050","sourceIdentifier":"cve@mitre.org","published":"2011-11-23T01:55:04.187","lastModified":"2026-06-16T23:26:02.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en jsp/admin/tools/remote_share.jsp en ManageEngine ADManager Plus v4.4.0, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro computerName. NOTA: El origen de esta información es desconocido; los detalles han sido obtenidos de una fuente de información de terceros."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"548108E9-73A4-422D-AEA7-A036414097C9"}]}]}],"references":[{"url":"http://osvdb.org/64857","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39901","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/40355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58860","source":"cve@mitre.org"},{"url":"http://osvdb.org/64857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/40355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/58860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1049","sourceIdentifier":"cve@mitre.org","published":"2012-02-13T19:55:01.037","lastModified":"2026-06-16T23:38:53.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do."},{"lang":"es","value":"Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en ManageEngine ADManager Plus v5.2 Build 5210 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro (1) nombreDominio de jsp / AddDC.jsp o (2) los parámetros de funcionamiento de DomainConfig.do."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:admanager_plus:5.2:build5210:*:*:*:*:*:*","matchCriteriaId":"8D5B5C27-59E2-4463-B525-B6F60318D70C"}]}]}],"references":[{"url":"http://packetstormsecurity.org/files/109528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/47887","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/51893","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73039","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/files/109528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/47887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/51893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1026","sourceIdentifier":"cve@mitre.org","published":"2015-03-11T14:59:04.017","lastModified":"2026-06-17T00:21:38.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inject arbitrary web script or HTML via the (1) technicianSearchText parameter to the Help Desk Technician page or (2) rolesSearchText parameter to the Help Desk Roles."},{"lang":"es","value":"Múltiples vulnerabilidades de XSS en ZOHO ManageEngine ADManager Plus anterior a 6.2 Build 6270 permiten a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través (1) del parámetro technicianSearchText en la página de técnico del centro de ayuda (Help Desk Technician) o (2) del parámetro rolesSearchText parameter en los roles del centro de ayuda (Help Desk Roles)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"B646FDCE-7B63-4210-A0AC-667D1AF24F48"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/130737/Manage-Engine-AD-Audit-Manager-Plus-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/534833/100/0/threaded","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/130737/Manage-Engine-AD-Audit-Manager-Plus-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/534833/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2018-15608","sourceIdentifier":"cve@mitre.org","published":"2018-08-28T19:29:17.007","lastModified":"2026-06-17T01:42:50.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the \"AD Delegation\" \"Help Desk Technicians\" screen."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus 6.5.7 permite la inyección HTML en la pantalla \"Help Desk Technicians\" de \"AD Delegation\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:manageengine:admanager_plus:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"93C07F5A-F7E4-421D-B6A4-62741FB63A2C"}]}]}],"references":[{"url":"https://www.exploit-db.com/exploits/45254/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/45254/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2018-15740","sourceIdentifier":"cve@mitre.org","published":"2018-08-28T19:29:17.490","lastModified":"2026-06-17T01:43:02.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\" screen."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus 6.5.7 tiene Cross-Site Scripting (XSS) en la pantalla \"Requester Roles\" de \"Workflow Delegation\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"E22DD181-25F0-48AE-A86A-753193FE6F1E"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/149097/ManageEngine-ADManager-Plus-6.5.7-Cross-Site-Scripting.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://drive.google.com/open?id=0Bw8rxEHEov76a0hwbFFVLVRMMjYxc05VV2JYc21NLXJiSHhJ","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://drive.google.com/open?id=0Bw8rxEHEov76cUVxZUxWS3lIanZ1VjhxSVBhdHBHUmJ1dmhr","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/45256/","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/149097/ManageEngine-ADManager-Plus-6.5.7-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://drive.google.com/open?id=0Bw8rxEHEov76a0hwbFFVLVRMMjYxc05VV2JYc21NLXJiSHhJ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://drive.google.com/open?id=0Bw8rxEHEov76cUVxZUxWS3lIanZ1VjhxSVBhdHBHUmJ1dmhr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.exploit-db.com/exploits/45256/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2018-19374","sourceIdentifier":"cve@mitre.org","published":"2019-04-30T18:29:07.620","lastModified":"2026-06-17T01:49:13.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a reboot) by placing a Trojan horse file into the permissive bin directory."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 6.6 compilación 6657, permite a los usuarios locales conseguir privilegios (después reiniciar) al colocar un archivo de troyano en el directorio bin permisivo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6657:*:*:*:*:*:*","matchCriteriaId":"EC6A1F29-3A46-4BF9-80FD-C8C26EF3F0D7"}]}]}],"references":[{"url":"https://research.digitalinterruption.com/2019/04/15/privilege-escalation-in-manageengine-admanager-plus-6/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://research.digitalinterruption.com/2019/04/15/privilege-escalation-in-manageengine-admanager-plus-6/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-12876","sourceIdentifier":"cve@mitre.org","published":"2019-07-17T20:15:11.273","lastModified":"2026-06-17T02:15:39.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 6.6.5, ADSelfService Plus versión 5.7, y DesktopCentral versión 10.0.380 tiene permisos no seguros, lo que conlleva a una escalada de privilegios desde los privilegios de bajo nivel hasta el sistema."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F04532BC-FBD0-4111-9213-3F044475CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:*:*:*:*:*:*:*","matchCriteriaId":"147F5946-E435-4EDF-B839-E1853C2F9DCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_desktop_central:10.0.380:*:*:*:*:*:*:*","matchCriteriaId":"643C7F9E-F838-421C-BB13-ECCFDF073C91"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/109298","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/109298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-24786","sourceIdentifier":"cve@mitre.org","published":"2020-08-31T15:15:10.870","lastModified":"2026-06-17T03:06:03.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build number 12136, ADAudit Plus before build number 6052, O365 Manager Plus before build number 4334, Cloud Security Plus before build number 4110, ADManager Plus before build number 7055, and Log360 before build number 5166. The remotely accessible Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails is prone to an authentication bypass. System integration properties can be modified and lead to full ManageEngine suite compromise."},{"lang":"es","value":"Se detectó  un problema en Zoho ManageEngine Exchange Reporter Plus antes del número de compilación 5510, AD360 antes del número de compilación 4228, ADSelfService Plus antes del número de compilación 5817, DataSecurity Plus antes del número de compilación 6033, RecoverManager Plus antes del número de compilación 6017, EventLog Analyzer antes del número de compilación 12136, ADAudit Además, antes del número de compilación 6052, O365 Manager Plus antes del número de compilación 4334, Cloud Security Plus antes del número de compilación 4110, ADManager Plus antes del número de compilación 7055 y Log360 antes del número de compilación 5166. El servlet de Java com.manageengine.ads.fw.servlet.UpdateProductDetails accesible remotamente es propenso a una omisión de autenticación. Las propiedades de integración del sistema pueden ser modificadas y conllevar a un compromiso total de la suite de ManageEngine"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"7380E0EF-684C-487E-B343-672248D8642E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:-:*:*:*:*:*:*","matchCriteriaId":"09718DA2-31D3-4CC3-B95D-6A8BE6233700"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5800:*:*:*:*:*:*","matchCriteriaId":"A217F6ED-BC7F-46B7-9D43-D75A3D416322"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5801:*:*:*:*:*:*","matchCriteriaId":"562397B8-DF54-4585-81B4-3F89816CC8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5802:*:*:*:*:*:*","matchCriteriaId":"319E6B84-4D6C-45D2-BF5A-8461202C4463"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5803:*:*:*:*:*:*","matchCriteriaId":"73DD6611-26EA-44A9-8FAC-0C4A91CAAB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5804:*:*:*:*:*:*","matchCriteriaId":"B964F5EA-427D-46D5-AE73-3BEBFE42A4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5805:*:*:*:*:*:*","matchCriteriaId":"94E70435-5332-48F3-9602-FCA1EFB617BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5806:*:*:*:*:*:*","matchCriteriaId":"AC040DA3-91BB-41CD-ADE3-D2AA0537516D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5807:*:*:*:*:*:*","matchCriteriaId":"8E71EE09-F2D6-4981-A962-14DAC49A9A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5808:*:*:*:*:*:*","matchCriteriaId":"4709685D-CCF0-4444-99B8-4DC6E3D53A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5809:*:*:*:*:*:*","matchCriteriaId":"13599F95-25B2-4C21-8174-DA966A49249B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5810:*:*:*:*:*:*","matchCriteriaId":"D2CB6693-492A-4607-9D9C-15C746E12864"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5811:*:*:*:*:*:*","matchCriteriaId":"35238419-A73A-4333-9F3D-481FAA1D167C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5812:*:*:*:*:*:*","matchCriteriaId":"BD7FEAF1-A4A5-480C-8BA4-0217E6CE63C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5813:*:*:*:*:*:*","matchCriteriaId":"4E0B4F11-A1E8-4D21-9707-8639A3040840"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5814:*:*:*:*:*:*","matchCriteriaId":"AAFE9B07-00B7-4211-ADD8-198B7BD4B93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5815:*:*:*:*:*:*","matchCriteriaId":"7F229F49-EA44-4D0A-855B-FC586CE8CFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8:5816:*:*:*:*:*:*","matchCriteriaId":"07AED2F0-F527-4B4A-82FC-F571899F3738"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4","matchCriteriaId":"3DB7B1B9-633E-4866-B236-94888342ACD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.5:5500:*:*:*:*:*:*","matchCriteriaId":"1A55E1C9-DCFE-49E7-A9A3-E3A5ECBEE4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.5:5501:*:*:*:*:*:*","matchCriteriaId":"E8C30A5E-33C7-4EB3-9FB4-D5AECD9A5C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.5:5502:*:*:*:*:*:*","matchCriteriaId":"B7085438-77E4-4B12-A885-F2294CF9B318"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.5:5503:*:*:*:*:*:*","matchCriteriaId":"7821DCD0-30DB-4520-B174-0E51CB07E12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.5:5504:*:*:*:*:*:*","matchCriteriaId":"4666EEFD-5F91-4F1D-BB15-736A984ABA27"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"CCCD7A9D-B1BC-4CE8-9E5D-8795674BB1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4200:*:*:*:*:*:*","matchCriteriaId":"14116D8A-9798-4EF2-9652-286D4CBDAADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4201:*:*:*:*:*:*","matchCriteriaId":"DAC56F69-9894-4236-9E4E-412403204E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4202:*:*:*:*:*:*","matchCriteriaId":"6B180386-1930-4EC2-9AF8-21F375E74BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4203:*:*:*:*:*:*","matchCriteriaId":"91787EC1-3053-4784-B985-FC09F368CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4204:*:*:*:*:*:*","matchCriteriaId":"B270FDB7-A2E2-4D77-9E68-17E57ED41B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4205:*:*:*:*:*:*","matchCriteriaId":"06621A53-3A32-4691-A02A-417A9DBCB9DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4206:*:*:*:*:*:*","matchCriteriaId":"E32D414E-ADEB-4FE3-8114-815A744DBF76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4207:*:*:*:*:*:*","matchCriteriaId":"E2A124B0-CAC1-4D17-98FF-DF479F404283"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4208:*:*:*:*:*:*","matchCriteriaId":"BED5824C-9A62-4A9E-A440-3368D709674B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4209:*:*:*:*:*:*","matchCriteriaId":"F36F3D07-F9E3-4CF1-8BD3-73F58B18D35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4210:*:*:*:*:*:*","matchCriteriaId":"357AB232-A834-4899-950D-53E0690726A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4212:*:*:*:*:*:*","matchCriteriaId":"680C0265-E4DF-4275-8B0C-EBD9E7B5B798"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4213:*:*:*:*:*:*","matchCriteriaId":"27CA1268-5D13-445A-985B-AE8F5494F61C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4214:*:*:*:*:*:*","matchCriteriaId":"2112361C-8F57-40E6-B665-FA8D585FA933"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4215:*:*:*:*:*:*","matchCriteriaId":"A4E777D1-9414-439C-9309-7C89192905A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4216:*:*:*:*:*:*","matchCriteriaId":"FDCD0C9A-0287-4BAA-97C1-CCA96212A8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4217:*:*:*:*:*:*","matchCriteriaId":"27D917BB-D64D-4E16-B5E2-485EE127A310"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4219:*:*:*:*:*:*","matchCriteriaId":"CD0D83CD-3F8B-41A5-8110-2207FC202529"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4220:*:*:*:*:*:*","matchCriteriaId":"E7569882-9E12-4ED8-9F54-AC1F0C9EC50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4222:*:*:*:*:*:*","matchCriteriaId":"F15A754D-A668-42C8-9E37-7A3364BE129B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4223:*:*:*:*:*:*","matchCriteriaId":"086FDB61-78D3-4540-B2AC-42DF1D41ABA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4224:*:*:*:*:*:*","matchCriteriaId":"6F9285FB-23E4-438E-8081-D0589A8727C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4225:*:*:*:*:*:*","matchCriteriaId":"A4E0D81C-36B3-4638-BB0E-18023D13DA97"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.2:4227:*:*:*:*:*:*","matchCriteriaId":"5B1F3742-3B1A-43DC-8CD7-547A4EB436E7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"D3ADF4BC-41C3-483D-A24F-52F5D8D90E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6000:*:*:*:*:*:*","matchCriteriaId":"D88BAE7C-AE20-4B66-8380-93CFF7E716F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6001:*:*:*:*:*:*","matchCriteriaId":"A2EA6313-C2FC-45B5-92E6-4239B4E41E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6002:*:*:*:*:*:*","matchCriteriaId":"B6BAA7AF-E61E-40FB-ADA5-CDC51508A848"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6003:*:*:*:*:*:*","matchCriteriaId":"9F96ED00-5DBE-4909-90DF-F4CDB4946ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6010:*:*:*:*:*:*","matchCriteriaId":"4CCFDC58-067A-420F-924B-9BFC342411D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6011:*:*:*:*:*:*","matchCriteriaId":"3C532BCE-429E-403D-9D44-9E3B8FD35C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6012:*:*:*:*:*:*","matchCriteriaId":"7286F2C9-FB52-4524-8293-81B36E9E8534"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6013:*:*:*:*:*:*","matchCriteriaId":"E70A8EC5-1046-42E8-99DC-D564B66BA987"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6020:*:*:*:*:*:*","matchCriteriaId":"A6BF11B6-4616-49DC-B7D0-0165691D7ABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6021:*:*:*:*:*:*","matchCriteriaId":"32FCBB8F-35F2-4A3C-8F04-39AEAAB76BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6030:*:*:*:*:*:*","matchCriteriaId":"75F07512-4B8D-492C-A59A-E2E75713241B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6031:*:*:*:*:*:*","matchCriteriaId":"1750C0CC-B017-44DF-95F2-628125E416FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.0:6032:*:*:*:*:*:*","matchCriteriaId":"B0D5FC87-6BD7-4056-8879-7BAF28BB69C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recovermanager_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4","matchCriteriaId":"DB19FFF0-464F-4BAA-BD8F-5A8296EAC724"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recovermanager_plus:6.0:6001:*:*:*:*:*:*","matchCriteriaId":"58739BDC-8741-4904-96C4-5E075FF87676"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recovermanager_plus:6.0:6003:*:*:*:*:*:*","matchCriteriaId":"69C40DE9-1849-437B-8C48-BB5ACD104CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recovermanager_plus:6.0:6005:*:*:*:*:*:*","matchCriteriaId":"5792AAA4-6E32-48F6-BAF9-91AE9CE468D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recovermanager_plus:6.0:6011:*:*:*:*:*:*","matchCriteriaId":"BB623771-BA56-4684-85E1-941A5EF0624A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recovermanager_plus:6.0:6016:*:*:*:*:*:*","matchCriteriaId":"9CCF0FA4-0326-405B-94F2-513E0FAA6FB6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*","versionEndIncluding":"12.1.2","matchCriteriaId":"789DE939-8305-4684-B19C-29F5A26E25A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.1.3:12130:*:*:*:*:*:*","matchCriteriaId":"04E5575C-A204-4A46-ACDB-7A2837B2A5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.1.3:12135:*:*:*:*:*:*","matchCriteriaId":"22C76170-BE8E-40D7-9AA0-349EBB9DC718"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"350B9823-6421-4817-A9BA-B138918ADEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6000:*:*:*:*:*:*","matchCriteriaId":"053FB8DD-94D7-438A-8802-8ECF8B79FCA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6001:*:*:*:*:*:*","matchCriteriaId":"616D32A3-B19A-4C05-BF43-4AEB7573BF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6002:*:*:*:*:*:*","matchCriteriaId":"28FF33D3-81DE-4849-8EA9-4C396D775892"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6003:*:*:*:*:*:*","matchCriteriaId":"A6BE7AA0-F201-4F29-BE11-983CAE5BE103"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6010:*:*:*:*:*:*","matchCriteriaId":"64339FF6-3563-41B2-8B61-A9DF076069C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6030:*:*:*:*:*:*","matchCriteriaId":"AD025538-8C73-4648-9C77-25E49FF77A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6031:*:*:*:*:*:*","matchCriteriaId":"FB3C81C0-1234-4CAA-8FB1-833FB2EF4872"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6032:*:*:*:*:*:*","matchCriteriaId":"A5E6D12F-C642-4001-A838-65DDA3F94D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6033:*:*:*:*:*:*","matchCriteriaId":"32435B99-81DD-4AEC-ABBF-DEAFAB00CC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6050:*:*:*:*:*:*","matchCriteriaId":"37CDC611-B94C-483C-9C4C-5BCFA6CAB7E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6052:*:*:*:*:*:*","matchCriteriaId":"A75E3D4D-5596-4E93-8541-F183AF105231"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"45EEAE93-0898-4FD8-9A31-FE2D5AAD3E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4300:*:*:*:*:*:*","matchCriteriaId":"1312ABF3-93FA-46E7-BF3C-61B1A0E7BA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4301:*:*:*:*:*:*","matchCriteriaId":"6912B88D-23D4-4E1E-98B8-60A60314A516"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4302:*:*:*:*:*:*","matchCriteriaId":"7392FEE2-8102-4125-8927-4356732ED167"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4303:*:*:*:*:*:*","matchCriteriaId":"0A9867BA-BAD0-482E-AC6B-CFDC9BF19AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4304:*:*:*:*:*:*","matchCriteriaId":"B20578E3-8995-4062-9FBF-85B76945B6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4305:*:*:*:*:*:*","matchCriteriaId":"96471B59-E195-4FF4-A36C-C4248F970817"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4306:*:*:*:*:*:*","matchCriteriaId":"DAD74918-D60A-427A-B46B-979F3D0870A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4308:*:*:*:*:*:*","matchCriteriaId":"91731443-F449-457A-B8BD-017726596714"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4309:*:*:*:*:*:*","matchCriteriaId":"C923DAAE-1C60-4A50-800D-422098A143FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4310:*:*:*:*:*:*","matchCriteriaId":"F820E8A0-981A-4C68-AFBF-D263B627F4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4311:*:*:*:*:*:*","matchCriteriaId":"84F1A956-19D1-47D3-AEF4-0117A25A1DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4312:*:*:*:*:*:*","matchCriteriaId":"2AE25043-4F64-4B5E-8B9F-B0793FE4834F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4316:*:*:*:*:*:*","matchCriteriaId":"2D5849AA-9DD2-4836-9F78-0CFB917A8398"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4317:*:*:*:*:*:*","matchCriteriaId":"777FFDDC-EA8A-45C5-963A-8982C7FA9D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4318:*:*:*:*:*:*","matchCriteriaId":"61658169-04C4-45A5-B6F9-31EABDFC7026"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4319:*:*:*:*:*:*","matchCriteriaId":"0439F4CA-5831-444F-9403-91B08D55CE37"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4320:*:*:*:*:*:*","matchCriteriaId":"CCE01DB3-1C25-4A0A-86A2-48052A01F21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4321:*:*:*:*:*:*","matchCriteriaId":"20CF3B2A-E1DA-472C-9E5B-7729F5A9B72F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4322:*:*:*:*:*:*","matchCriteriaId":"EF5CADAA-EE4B-45FE-8B31-910EB2F9A457"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4324:*:*:*:*:*:*","matchCriteriaId":"317936F9-5856-4C05-96B0-06B286002C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4325:*:*:*:*:*:*","matchCriteriaId":"7A6A9E35-0AE0-41EC-95BD-6DA045B670C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4327:*:*:*:*:*:*","matchCriteriaId":"02E7A3A5-B101-450A-B048-580535ACD150"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4328:*:*:*:*:*:*","matchCriteriaId":"A7804A96-2937-46EE-BCCE-7C19D3A0BF87"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4329:*:*:*:*:*:*","matchCriteriaId":"92CF2307-5CE0-44C6-BBAB-9974879426D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4330:*:*:*:*:*:*","matchCriteriaId":"A8D1D36D-990A-426E-9DA6-8506DA235FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4331:*:*:*:*:*:*","matchCriteriaId":"9210E989-CEBE-430A-ABF1-30DFC3B81CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4332:*:*:*:*:*:*","matchCriteriaId":"AD45843D-AB8F-4CFF-8EDA-3A1AEB9C3CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4333:*:*:*:*:*:*","matchCriteriaId":"81549C4B-1B64-4E4F-91D2-25EA86BB2859"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_o365_manager_plus:4.3:4334:*:*:*:*:*:*","matchCriteriaId":"56201D6A-2330-41D0-B38D-9D4A21D6CF20"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"6D116EAD-FC10-4B20-88C1-356C9EE0F8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4100:*:*:*:*:*:*","matchCriteriaId":"BFD452AD-7053-4C13-97DA-326C3DC6E26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4101:*:*:*:*:*:*","matchCriteriaId":"0B87956F-9C45-4A65-BEB2-77A247BD7A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4102:*:*:*:*:*:*","matchCriteriaId":"17BE6347-1605-47DB-8CFE-B587E3AB4223"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4103:*:*:*:*:*:*","matchCriteriaId":"C47F9F56-B1DE-426B-B5CF-A1BB5973D6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4104:*:*:*:*:*:*","matchCriteriaId":"E6A7C5C6-0137-4279-A7EA-3439BE477A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4105:*:*:*:*:*:*","matchCriteriaId":"C921F1B2-69B4-448F-AC7C-2F4474507FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4106:*:*:*:*:*:*","matchCriteriaId":"91DB9017-1BCF-48DB-97AE-4214150BAE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4107:*:*:*:*:*:*","matchCriteriaId":"D066B999-8554-49F0-92C3-1A4DDEA6E32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4108:*:*:*:*:*:*","matchCriteriaId":"635F80E1-4A73-48DC-A128-D61716D70839"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4109:*:*:*:*:*:*","matchCriteriaId":"E74FE1C4-471A-4040-96A4-0BE46745199B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndIncluding":"6.6","matchCriteriaId":"CF66EAF9-40F8-4C96-B521-58EFEFFEA2C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7000:*:*:*:*:*:*","matchCriteriaId":"4DE6724F-80AA-4B3E-8CF1-1158F6C98AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7010:*:*:*:*:*:*","matchCriteriaId":"A4D9B6E0-47A7-48D1-AF6A-A8512475ABD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7011:*:*:*:*:*:*","matchCriteriaId":"FFD7E625-FAA2-4452-9E18-5E4A61A93FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7020:*:*:*:*:*:*","matchCriteriaId":"8504DAE3-6CD9-4640-9EB1-CB304DB79BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7030:*:*:*:*:*:*","matchCriteriaId":"F42110FC-D21E-439E-BB8C-45C03F639CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7040:*:*:*:*:*:*","matchCriteriaId":"612E5D11-83D1-4E80-B7A4-57F61690DFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7041:*:*:*:*:*:*","matchCriteriaId":"C89C31C7-3196-47CD-9A9D-0761CEEB04E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7050:*:*:*:*:*:*","matchCriteriaId":"821C24DA-1C22-43ED-AD67-E947D323A3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7051:*:*:*:*:*:*","matchCriteriaId":"FAFEF7B6-4B56-42C8-958B-E0B677F5D150"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7052:*:*:*:*:*:*","matchCriteriaId":"43CEBA06-F115-41E9-8B3E-C004528340A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7053:*:*:*:*:*:*","matchCriteriaId":"E398D48C-AD94-4E84-9E3A-28A8586B3112"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7054:*:*:*:*:*:*","matchCriteriaId":"3D042A11-638F-4485-A753-ACF2BE92D900"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"26B0E2FA-186D-48D7-89AE-461224CA7242"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5100:*:*:*:*:*:*","matchCriteriaId":"4F222A9E-12E7-45E6-BF7D-61D60FCF1787"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5102:*:*:*:*:*:*","matchCriteriaId":"E5EBBD07-EB06-407C-8BFE-139A7F37D129"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5107:*:*:*:*:*:*","matchCriteriaId":"4408F07A-E77E-4F74-B951-E90D0AD0FC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5108:*:*:*:*:*:*","matchCriteriaId":"44454167-93A9-4109-A137-0DBF56B870E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5110:*:*:*:*:*:*","matchCriteriaId":"9F95F165-5E41-4F44-A049-1B67F045A3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5111:*:*:*:*:*:*","matchCriteriaId":"EF50B0BD-244E-4445-A119-7165829BEA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5120:*:*:*:*:*:*","matchCriteriaId":"0A509BA6-9E79-4250-B412-2CCE2EF20031"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5150:*:*:*:*:*:*","matchCriteriaId":"CA676B42-6E42-4A5C-986E-C06A4F97500A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5154:*:*:*:*:*:*","matchCriteriaId":"CA8D9B25-9BB1-427A-8C07-FB40638218E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5155:*:*:*:*:*:*","matchCriteriaId":"B1660FC6-4E59-4F1B-ABAB-51E7CD31B3C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5160:*:*:*:*:*:*","matchCriteriaId":"994FB926-30C1-4399-BE7E-1989375382FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.1:5164:*:*:*:*:*:*","matchCriteriaId":"38C88C6C-A399-4B3F-A3DE-8410B68C9C2D"}]}]}],"references":[{"url":"https://medium.com/%40frycos/another-zoho-manageengine-story-7b472f1515f5","source":"cve@mitre.org"},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/admanager-plus-fixes-and-enhancements","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-fix-the-unauthenticated-product-integration-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-fix-the-unauthenticated-product-integration-vulnerability-17-5-2020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-fix-the-unauthenticated-product-integration-vulnerability-18-5-2020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-identify-and-mitigate-the-unauthenticated-product-integration-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-identify-and-mitigate-the-unauthenticated-product-integration-vulnerability-15-5-2020-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-identify-and-mitigate-the-unauthenticated-product-integration-vulnerability-18-5-2020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/kb/articles/manageengine-cloud-security-plus-security-advisory-regarding-unauthenticated-product-integration-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/kb/articles/manageengine-log360-security-advisory-regarding-unauthenticated-product-integration-vulnerability","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/data-security/release-notes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/eventlog/features-new.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://medium.com/%40frycos/another-zoho-manageengine-story-7b472f1515f5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/admanager-plus-fixes-and-enhancements","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-fix-the-unauthenticated-product-integration-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-fix-the-unauthenticated-product-integration-vulnerability-17-5-2020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-fix-the-unauthenticated-product-integration-vulnerability-18-5-2020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-identify-and-mitigate-the-unauthenticated-product-integration-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-identify-and-mitigate-the-unauthenticated-product-integration-vulnerability-15-5-2020-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/community/topic/how-to-identify-and-mitigate-the-unauthenticated-product-integration-vulnerability-18-5-2020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/kb/articles/manageengine-cloud-security-plus-security-advisory-regarding-unauthenticated-product-integration-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://pitstop.manageengine.com/portal/en/kb/articles/manageengine-log360-security-advisory-regarding-unauthenticated-product-integration-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/data-security/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/eventlog/features-new.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-35594","sourceIdentifier":"cve@mitre.org","published":"2021-03-05T17:15:14.187","lastModified":"2026-06-17T03:14:00.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7066 allows XSS."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7066, permite un ataque de tipo XSS"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0","matchCriteriaId":"1B2428F5-265B-4081-89E6-EAE2732B3E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:-:*:*:*:*:*:*","matchCriteriaId":"E6162E29-CDBE-4AE0-8160-C4D6A99BFE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7000:*:*:*:*:*:*","matchCriteriaId":"4DE6724F-80AA-4B3E-8CF1-1158F6C98AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7010:*:*:*:*:*:*","matchCriteriaId":"A4D9B6E0-47A7-48D1-AF6A-A8512475ABD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7011:*:*:*:*:*:*","matchCriteriaId":"FFD7E625-FAA2-4452-9E18-5E4A61A93FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7020:*:*:*:*:*:*","matchCriteriaId":"8504DAE3-6CD9-4640-9EB1-CB304DB79BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7030:*:*:*:*:*:*","matchCriteriaId":"F42110FC-D21E-439E-BB8C-45C03F639CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7040:*:*:*:*:*:*","matchCriteriaId":"612E5D11-83D1-4E80-B7A4-57F61690DFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7041:*:*:*:*:*:*","matchCriteriaId":"C89C31C7-3196-47CD-9A9D-0761CEEB04E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7050:*:*:*:*:*:*","matchCriteriaId":"821C24DA-1C22-43ED-AD67-E947D323A3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7051:*:*:*:*:*:*","matchCriteriaId":"FAFEF7B6-4B56-42C8-958B-E0B677F5D150"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7052:*:*:*:*:*:*","matchCriteriaId":"43CEBA06-F115-41E9-8B3E-C004528340A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7053:*:*:*:*:*:*","matchCriteriaId":"E398D48C-AD94-4E84-9E3A-28A8586B3112"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7054:*:*:*:*:*:*","matchCriteriaId":"3D042A11-638F-4485-A753-ACF2BE92D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7055:*:*:*:*:*:*","matchCriteriaId":"6A08DCBD-FB40-4E8D-AA29-E4CA4811FB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7056:*:*:*:*:*:*","matchCriteriaId":"EDEB04D2-0804-49D3-9594-7E71D6ED0710"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7060:*:*:*:*:*:*","matchCriteriaId":"8677DEC0-07FA-4E46-9EB6-B5BD84CA7128"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7061:*:*:*:*:*:*","matchCriteriaId":"9A5D33D3-6A4C-4E31-9F3B-3280DF70DF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7062:*:*:*:*:*:*","matchCriteriaId":"E53B4C3C-7D4B-447B-AA00-E8542071C751"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7063:*:*:*:*:*:*","matchCriteriaId":"6A4BB301-D085-46DF-9C96-B4DE040BA033"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7064:*:*:*:*:*:*","matchCriteriaId":"F39F4354-815C-490C-AE8E-670148FE893F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7065:*:*:*:*:*:*","matchCriteriaId":"A7D0D80C-3267-4D13-83DE-344BCF1FF39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7066:*:*:*:*:*:*","matchCriteriaId":"1D2E1C9F-D239-41BE-B924-E57D30923877"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7066","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-33911","sourceIdentifier":"cve@mitre.org","published":"2021-07-17T19:15:07.830","lastModified":"2026-06-17T03:55:22.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7110 allows remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7110, permite una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36771","sourceIdentifier":"cve@mitre.org","published":"2021-07-17T19:15:07.867","lastModified":"2026-06-17T03:59:08.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7110, permite un ataque de tipo XSS reflejado"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36772","sourceIdentifier":"cve@mitre.org","published":"2021-07-17T19:15:07.893","lastModified":"2026-06-17T03:59:08.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7110 allows stored XSS."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7110, permite un ataque de tipo XSS almacenado"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37741","sourceIdentifier":"cve@mitre.org","published":"2021-09-21T13:15:07.987","lastModified":"2026-06-17T04:01:05.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities."},{"lang":"es","value":"ManageEngine ADManager Plus versiones anteriores a 7111, presenta vulnerabilidades de RCE de pre-autenticación"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37925","sourceIdentifier":"cve@mitre.org","published":"2021-09-22T14:15:07.627","lastModified":"2026-06-17T04:01:15.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, presenta una vulnerabilidad de inyección de comandos Post-Auth OS"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37927","sourceIdentifier":"cve@mitre.org","published":"2021-09-22T14:15:07.683","lastModified":"2026-06-17T04:01:15.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una toma de control de cuentas por medio de SSO"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/self-service-password/release-notes.html#6110","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/self-service-password/release-notes.html#6110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37539","sourceIdentifier":"cve@mitre.org","published":"2021-09-27T15:15:07.623","lastModified":"2026-06-17T04:00:42.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7111, es vulnerable a un archivo sin restricciones que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37761","sourceIdentifier":"cve@mitre.org","published":"2021-09-27T17:15:08.593","lastModified":"2026-06-17T04:01:06.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores es vulnerable a una carga de archivos sin restricciones, conllevando a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37762","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.267","lastModified":"2026-06-17T04:01:06.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una sobrescritura de archivos sin restricciones conllevando a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37918","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.313","lastModified":"2026-06-17T04:01:14.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37919","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.363","lastModified":"2026-06-17T04:01:15.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37920","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.410","lastModified":"2026-06-17T04:01:15.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37921","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.457","lastModified":"2026-06-17T04:01:15.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37922","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.500","lastModified":"2026-06-17T04:01:15.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to another."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores es vulnerable a un salto de ruta que permite copiar archivos de un directorio a otro"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37923","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.547","lastModified":"2026-06-17T04:01:15.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37924","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.597","lastModified":"2026-06-17T04:01:15.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37926","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.640","lastModified":"2026-06-17T04:01:15.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37928","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.687","lastModified":"2026-06-17T04:01:16.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37929","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.733","lastModified":"2026-06-17T04:01:16.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37930","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.780","lastModified":"2026-06-17T04:01:16.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-37931","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T16:15:08.827","lastModified":"2026-06-17T04:01:16.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versión 7110 y anteriores, permite una carga de archivos sin restricciones, que conlleva a una ejecución de código remota"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-38298","sourceIdentifier":"cve@mitre.org","published":"2021-10-07T22:15:07.497","lastModified":"2026-06-17T04:01:49.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7110, es vulnerable a un ataque de tipo XXE ciego"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20130","sourceIdentifier":"vulnreport@tenable.com","published":"2021-10-13T18:15:07.843","lastModified":"2026-06-17T03:33:19.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface."},{"lang":"es","value":"ManageEngine ADManager Plus versión Build 7111, contiene una vulnerabilidad de ejecución de código remota posterior a la autenticación debido una cargas de archivos comprobada inapropiadamente en la interfaz de PasswordExpiry"}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"n/a","product":"ManageEngine ADManager Plus Build 7111","versions":[{"version":"ManageEngine ADManager Plus Build 7111","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2021-43","source":"vulnreport@tenable.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2021-43","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-20131","sourceIdentifier":"vulnreport@tenable.com","published":"2021-10-13T18:15:07.887","lastModified":"2026-06-17T03:33:19.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface."},{"lang":"es","value":"ManageEngine ADManager Plus versión Build 7111 contiene una vulnerabilidad de ejecución de código remota después de la autenticación debido a una carga de archivos comprobada inapropiadamente en la interfaz de Personalización"}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"n/a","product":"ManageEngine ADManager Plus Build 7111","versions":[{"version":"ManageEngine ADManager Plus Build 7111","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"}]}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2021-43","source":"vulnreport@tenable.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2021-43","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42002","sourceIdentifier":"cve@mitre.org","published":"2021-11-11T05:15:09.550","lastModified":"2026-06-17T04:09:08.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus versiones anteriores a 7115, es vulnerable a una omisión de filtro que conlleva a una ejecución de código remota de carga de archivos"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/release-notes.html#7115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29457","sourceIdentifier":"cve@mitre.org","published":"2022-04-18T20:15:09.263","lastModified":"2026-06-17T04:40:13.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps."},{"lang":"es","value":"Zoho ManageEngine ADSelfService Plus versiones anteriores a 6121, ADAuditPlus versión 7060, Exchange Reporter Plus versión 5701, y ADManagerPlus versión 7131, permiten una divulgación de NTLM Hash durante determinados pasos de configuración de la ruta de almacenamiento"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.0","matchCriteriaId":"ED61D61A-99CB-4279-AEF4-4F5D509AAAB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:-:*:*:*:*:*:*","matchCriteriaId":"4647CCE1-92BF-486A-A245-2E6BADC14C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7000:*:*:*:*:*:*","matchCriteriaId":"AC907344-7ACC-41CA-AA1D-8AEE1C604F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7002:*:*:*:*:*:*","matchCriteriaId":"6957BD6B-3CCB-4C45-B3E9-DE988CDEF122"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7003:*:*:*:*:*:*","matchCriteriaId":"B932650D-3BCF-4A9C-B518-04C212925C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7004:*:*:*:*:*:*","matchCriteriaId":"FF8CFB6B-DD8F-45BD-9F17-7BE6014AFE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7005:*:*:*:*:*:*","matchCriteriaId":"583C263D-F219-434C-A452-9F4A337FAF7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7006:*:*:*:*:*:*","matchCriteriaId":"154B0AC9-FB9F-42FC-85FF-B6F4DA77F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7007:*:*:*:*:*:*","matchCriteriaId":"2C71406B-D0A7-480F-BD70-F01AF8800749"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7008:*:*:*:*:*:*","matchCriteriaId":"5643057F-7579-465C-9C0F-F83617C6BE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7050:*:*:*:*:*:*","matchCriteriaId":"BD6AFBED-42E1-400B-A198-71220D228770"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7051:*:*:*:*:*:*","matchCriteriaId":"6F4BB38D-4E2A-41A0-8ED2-5D23FDE1BF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7052:*:*:*:*:*:*","matchCriteriaId":"E14468CC-1FAF-4F3C-872A-283923E11BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7053:*:*:*:*:*:*","matchCriteriaId":"F05B3F91-1ECB-4000-A0E1-814DC82CE9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7054:*:*:*:*:*:*","matchCriteriaId":"F216675D-EC1B-4C67-ACA4-002C3A31976D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0:7055:*:*:*:*:*:*","matchCriteriaId":"A70FBB7E-A8D7-4DF9-BF7C-C6E8FC6FFCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1","matchCriteriaId":"A79AAA12-67D4-4343-9E0B-249C07144DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:-:*:*:*:*:*:*","matchCriteriaId":"B2320EEE-367C-4CE1-8AC4-048B97DE71F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6100:*:*:*:*:*:*","matchCriteriaId":"B1E5484A-D834-4C7A-962C-C78CF0CDAA8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6101:*:*:*:*:*:*","matchCriteriaId":"6FA21683-29F7-44EB-84C6-D29C6C64DE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6102:*:*:*:*:*:*","matchCriteriaId":"7BE0B72F-2963-4666-9A82-7812BFB52DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6103:*:*:*:*:*:*","matchCriteriaId":"85DD7E26-B9C5-4DCC-8F50-F5884AF61105"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6104:*:*:*:*:*:*","matchCriteriaId":"AC37608E-E61B-4333-8358-50C8377A1ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6105:*:*:*:*:*:*","matchCriteriaId":"C13EF458-FE95-49E5-9A13-04C96C3F114A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6106:*:*:*:*:*:*","matchCriteriaId":"12919644-3D85-488C-89A3-58A1FB31279D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6107:*:*:*:*:*:*","matchCriteriaId":"75206A94-9155-48D7-A378-5020877B8B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6108:*:*:*:*:*:*","matchCriteriaId":"E50CF265-DE6F-4281-8300-06D54185AA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6109:*:*:*:*:*:*","matchCriteriaId":"EB577C00-1412-4F87-B91A-5E956EB2213F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6110:*:*:*:*:*:*","matchCriteriaId":"4C7681FA-FC15-49CE-9288-3C4E361F4D21"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6111:*:*:*:*:*:*","matchCriteriaId":"80F12A94-93C5-4442-8FB3-4E02E4DECCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6112:*:*:*:*:*:*","matchCriteriaId":"17270CDC-C800-4B5A-BEAA-83AF455BBBEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6113:*:*:*:*:*:*","matchCriteriaId":"DAFE53B1-7736-4560-8FEF-AA0F56FEACF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6114:*:*:*:*:*:*","matchCriteriaId":"C5491174-9BE3-4FBF-AEF5-6A313E2CEBA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6115:*:*:*:*:*:*","matchCriteriaId":"E407C5F1-43D0-4B5D-A3B8-A48A7024CCB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6116:*:*:*:*:*:*","matchCriteriaId":"2EC89DCA-D24A-46BB-8086-C306BB4CDABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6117:*:*:*:*:*:*","matchCriteriaId":"45BEF834-4A4B-4CB0-BEBF-73A03FDAC773"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6118:*:*:*:*:*:*","matchCriteriaId":"E319DA11-0C76-4F52-A197-FFBF4F30BB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6119:*:*:*:*:*:*","matchCriteriaId":"B928577F-3183-4305-9009-A8C6970477D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1:6120:*:*:*:*:*:*","matchCriteriaId":"CE6F33B5-418E-4B38-81EB-090E4F3AF89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"3DA0580F-8167-450E-A1E9-0F1F7FC7E2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:-:*:*:*:*:*:*","matchCriteriaId":"3FC399C6-4299-4744-9FC5-13CFE7478164"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:*","matchCriteriaId":"E913F3D6-9F94-4130-94FF-37F4D81BAEF4"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/167051/ManageEngine-ADSelfService-Plus-Build-6118-NTLMv2-Hash-Exposure.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://docs.unsafe-inline.com/0day/multiple-manageengine-applications-critical-information-disclosure-vulnerability","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://www.manageengine.com/products/self-service-password/release-notes.html","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/167051/ManageEngine-ADSelfService-Plus-Build-6118-NTLMv2-Hash-Exposure.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://docs.unsafe-inline.com/0day/multiple-manageengine-applications-critical-information-disclosure-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://www.manageengine.com/products/self-service-password/release-notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42904","sourceIdentifier":"cve@mitre.org","published":"2022-11-18T21:15:11.563","lastModified":"2026-06-17T05:05:34.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus hasta 7151 permite a los usuarios administradores autenticados ejecutar los comandos en la configuración del proxy."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-30T13:58:00.578373Z","id":"CVE-2022-42904","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*","matchCriteriaId":"34A48841-EA09-4917-A6FF-DF645B581426"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*","matchCriteriaId":"1C042646-9D36-4712-9E5D-40E55FCF7C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*","matchCriteriaId":"9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*","matchCriteriaId":"77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*","matchCriteriaId":"7E53B3CB-4351-4E24-B80C-D62CC483D4D7"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2022-42904.html","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2022-42904.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-47966","sourceIdentifier":"cve@mitre.org","published":"2023-01-18T18:15:10.570","lastModified":"2026-07-31T04:16:41.843","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active)."},{"lang":"es","value":"Múltiples productos locales de Zoho ManageEngine, como ServiceDesk Plus hasta 14003, permiten la ejecución remota de código debido al uso de Apache Santuario xmlsec (también conocido como XML Security para Java) 1.4.1, porque las funciones xmlsec XSLT, por diseño en esa versión, hacen la aplicación responsable de ciertas protecciones de seguridad, y las aplicaciones ManageEngine no proporcionaban esas protecciones. Esto afecta a Access Manager Plus anterior a 4308, Active Directory 360 anterior a 4310, ADAudit Plus anterior a 7081, ADManager Plus anterior a 7162, ADSelfService Plus anterior a 6211, Analytics Plus anterior a 5150, Application Control Plus anterior a 10.1.2220.18, Asset Explorer anterior a 6983, Browser Security Plus antes de 11.1.2238.6, Device Control Plus antes de 10.1.2220.18, Endpoint Central antes de 10.1.2228.11, Endpoint Central MSP antes de 10.1.2228.11, Endpoint DLP antes de 10.1.2137.6, Key Manager Plus antes de 6401, OS Deployer antes de 1.1.2243.1, PAM 360 antes de 5713, Password Manager Pro antes de 12124, Patch Manager Plus antes de 10.1.2220.18, Remote Access Plus antes de 10.1.2228.11, Remote Monitoring and Management (RMM) antes de 10.1.41. ServiceDesk Plus anterior a 14004, ServiceDesk Plus MSP anterior a 13001, SupportCenter Plus anterior a 11026 y Vulnerability Manager Plus anterior a 10.1.2220.18. La explotación solo es posible si alguna vez se ha configurado SAML SSO para un producto (para algunos productos, la explotación requiere que SAML SSO esté actualmente activo).\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-01-13T00:00:00+00:00","id":"CVE-2022-47966","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-01-23","cisaActionDue":"2023-02-13","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"5FDF15FF-2561-4139-AC5E-4812584B1B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4300:*:*:*:*:*:*","matchCriteriaId":"D5DEC045-6A7E-4041-88F8-5ABC4AB51C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4301:*:*:*:*:*:*","matchCriteriaId":"52DDE5D9-28DE-446F-A402-7BE3C33A4B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4302:*:*:*:*:*:*","matchCriteriaId":"F6E1E4D8-B7F0-4BDB-B5A2-55436BEC85F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4303:*:*:*:*:*:*","matchCriteriaId":"59675CC4-8A5C-4668-908C-0886B4B310DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4304:*:*:*:*:*:*","matchCriteriaId":"45084336-F1DC-4E5B-A45E-506A779985D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4305:*:*:*:*:*:*","matchCriteriaId":"1B2CC071-5BB3-4A25-88F2-DBC56B94D895"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4306:*:*:*:*:*:*","matchCriteriaId":"E6FDF373-4711-4B72-A14E-CEB19301C40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4307:*:*:*:*:*:*","matchCriteriaId":"0E0F346C-0445-4D38-8583-3379962B540F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"D2B1FA6A-43DB-4CCC-AC05-77810ED7B80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4300:*:*:*:*:*:*","matchCriteriaId":"1179FC2E-0FCC-4744-85A7-1D68AE742FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4302:*:*:*:*:*:*","matchCriteriaId":"F05F8E9D-1880-4B94-922E-BA61FA112945"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4303:*:*:*:*:*:*","matchCriteriaId":"F336B0C2-1F99-4BC7-828B-02E432CB0723"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4304:*:*:*:*:*:*","matchCriteriaId":"CBBA787F-7F38-4AD3-90BE-D307D75F1BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4305:*:*:*:*:*:*","matchCriteriaId":"46A96B82-49E1-4392-BDCF-CC9753D67A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4306:*:*:*:*:*:*","matchCriteriaId":"837BF464-6D18-4267-8913-D7937C91789B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4308:*:*:*:*:*:*","matchCriteriaId":"0243CA85-B856-4ED9-BCD0-5EAB182862CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4309:*:*:*:*:*:*","matchCriteriaId":"FB216CD0-B3BD-434D-8FC6-BB60408C128A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0","matchCriteriaId":"FFA4EA7A-B1C1-4750-A11D-89054B77B320"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*","matchCriteriaId":"16BADE82-3652-4074-BDFF-828B7213CAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*","matchCriteriaId":"01E9CAE9-4B45-4E7A-BE78-6E7E9A3A04E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*","matchCriteriaId":"CFA4FC59-CC4F-4F21-9AE9-3F526C91411C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*","matchCriteriaId":"26A6F6D1-540C-43C5-96A7-0E36F3E0A4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*","matchCriteriaId":"97EA9324-9377-46E1-A0EA-637128E65DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:*","matchCriteriaId":"EA5BE36E-A73A-4D1C-8185-9692373F1444"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:*","matchCriteriaId":"10F48951-44A1-42C1-AE2A-B2CDFFCAFDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:*","matchCriteriaId":"F505C783-09DE-4045-9DB4-DD850B449A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:*","matchCriteriaId":"212BF664-02DE-457F-91A6-6F824ECC963B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:*","matchCriteriaId":"D102B74F-6762-4EFE-BAF7-A7D416867D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:*","matchCriteriaId":"FEDF5C01-41D8-45C0-8F0D-3A7FCB6DADEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:*","matchCriteriaId":"5D6ACBF5-25C6-403A-BCFA-66A90A8B4E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:*","matchCriteriaId":"CF50DCAC-33E1-4FE2-BF3C-C6A17CC8E48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:*","matchCriteriaId":"5B2F6EE4-F3DC-43CE-B7FD-C9522A35406A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:*","matchCriteriaId":"623151CB-4C6B-4068-B173-FE8E73D652F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:*","matchCriteriaId":"1D84377E-CB44-4C6A-A665-763A1CD1AF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:*","matchCriteriaId":"603D1875-BD5E-4C6C-9D2C-3CAA9D7B3AE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:*","matchCriteriaId":"4C568190-1C1B-44FA-B50A-C142A0B8224D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:*","matchCriteriaId":"F876B2E2-C2FF-47BE-9F53-5F86606A08CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*","matchCriteriaId":"34A48841-EA09-4917-A6FF-DF645B581426"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*","matchCriteriaId":"1C042646-9D36-4712-9E5D-40E55FCF7C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*","matchCriteriaId":"9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*","matchCriteriaId":"77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*","matchCriteriaId":"7E53B3CB-4351-4E24-B80C-D62CC483D4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*","matchCriteriaId":"0068E901-62D2-4C4D-96F8-7823B0DF7DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*","matchCriteriaId":"CF70BA56-3478-4DA5-B013-4D9B820D2219"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2","matchCriteriaId":"7BC9667B-3ECE-4DF8-9C45-95E53736CD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6200:*:*:*:*:*:*","matchCriteriaId":"BAFCD8BD-07E4-4AD3-B802-9A6D2254777A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6201:*:*:*:*:*:*","matchCriteriaId":"B1E4E7ED-317B-471D-B387-24BFE504FD48"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6202:*:*:*:*:*:*","matchCriteriaId":"1518C214-71A7-4C97-BA40-95D98E0C78BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6203:*:*:*:*:*:*","matchCriteriaId":"247ED04D-E067-4A18-8514-9CD635DF4F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6204:*:*:*:*:*:*","matchCriteriaId":"8AC2C862-7709-44BF-9D0C-1BD63B381001"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6205:*:*:*:*:*:*","matchCriteriaId":"1E936706-E1D6-496A-8395-96706AF32F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6206:*:*:*:*:*:*","matchCriteriaId":"CA25E9BB-DDB9-438C-890A-61264C10BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6207:*:*:*:*:*:*","matchCriteriaId":"D71FF123-F797-4E0D-8167-DD4563733879"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6208:*:*:*:*:*:*","matchCriteriaId":"1156F671-D6BD-4FA2-924F-1802F157A025"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6209:*:*:*:*:*:*","matchCriteriaId":"C7ABB8B4-1CBF-4437-A751-B51F2B061C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6210:*:*:*:*:*:*","matchCriteriaId":"E870D833-28A7-45E1-9A6B-26A33D66B507"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"5.1","matchCriteriaId":"2026DE5E-EDDA-4134-A63E-1F01A9ED209F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5100:*:*:*:*:*:*","matchCriteriaId":"DBEE7368-580D-422E-80DE-079462579BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5110:*:*:*:*:*:*","matchCriteriaId":"92C88B5F-3689-4314-B23E-D9051808C1D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5120:*:*:*:*:*:*","matchCriteriaId":"839EB997-896A-4CD9-BADF-1C2DC2B498F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5121:*:*:*:*:*:*","matchCriteriaId":"7A4DF40E-2941-4A38-9297-42502D7EE0C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5130:*:*:*:*:*:*","matchCriteriaId":"DD056927-1BC0-42A0-8E26-7FC0F4BE58AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5140:*:*:*:*:*:*","matchCriteriaId":"99F6F9CC-5A94-4A74-8D36-BE198424C955"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9","matchCriteriaId":"A6DEEF51-0977-4061-9919-803DFD144E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*","matchCriteriaId":"7D0754D0-5B28-4851-89A2-DC5B20CFF3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*","matchCriteriaId":"6E0CAA5B-16A1-4637-B90A-BFAF7381CCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*","matchCriteriaId":"48A960D7-7AB2-43F4-99FC-5B1FE69BFDB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*","matchCriteriaId":"B293513C-9ECB-4512-B1B8-A470C6115458"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*","matchCriteriaId":"5D9B89EB-C51F-4A70-A6DF-1BD326308DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*","matchCriteriaId":"9B708143-01B3-45D0-A769-E1D8E99237B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*","matchCriteriaId":"F1837C80-7D1F-4AF5-BF4B-932DF03D6A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*","matchCriteriaId":"4E528B83-1539-4516-9ACF-A05E853014DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*","matchCriteriaId":"CBFB65BC-5B94-4075-BBB1-4CD8B5B216C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*","matchCriteriaId":"7FAF3DFA-78FB-417C-808A-507F66889913"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*","matchCriteriaId":"E9506197-CDDA-451B-9FE3-72B3C3BA19EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*","matchCriteriaId":"691DF8EC-6A7A-4449-8A4C-79F76726D685"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*","matchCriteriaId":"0B3E2B0A-EB1E-45C3-BC2C-9E32268A0867"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*","matchCriteriaId":"E1BD2753-52B8-4EB0-8332-C67935FB8B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*","matchCriteriaId":"E8BD08BF-4E5D-4DE4-A499-B0296C126599"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*","matchCriteriaId":"F13CB227-496C-4777-BE76-27AFF5ED15C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*","matchCriteriaId":"2AB1DF8F-3385-40C6-92C5-10724F8A6911"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*","matchCriteriaId":"C1997DE8-8CFA-4882-9107-741B88339A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*","matchCriteriaId":"148F6458-136D-4612-9619-F51AEEC11AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*","matchCriteriaId":"8B189696-D6BC-475B-90CA-AF122224FEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*","matchCriteriaId":"477C97EC-A497-4C7C-973B-2C057A9242AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*","matchCriteriaId":"284F5D9D-F23F-4936-B461-10701CC3AB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*","matchCriteriaId":"74CE0145-F165-4FB4-A819-01B30641196A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*","matchCriteriaId":"CA291C44-616B-45D9-9709-61CD33E8B135"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*","matchCriteriaId":"C1C7492E-5D5B-419D-9749-7CC6EE5BC0FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*","matchCriteriaId":"DCF1B243-DA58-42CD-9DF4-6D4A010796D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*","matchCriteriaId":"2B73FD0F-6B48-406E-AB29-606CC07C81C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*","matchCriteriaId":"CED2C49D-DB96-4495-BD6F-460871D94EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*","matchCriteriaId":"C9AAC638-1379-4F87-9BA3-07CE16CAB98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*","matchCriteriaId":"B3470B5B-B8BC-41B9-8CA5-5E7A0EB9934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*","matchCriteriaId":"3A2D9355-B1D5-4B14-8900-42E7C8DC5E4E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_key_manager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4","matchCriteriaId":"BB1E5798-5079-4292-9C11-2F334F8AC825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_key_manager_plus:6.4:6400:*:*:*:*:*:*","matchCriteriaId":"37D11E5C-C569-4D9F-BFF8-315F6D458D68"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"1478BFC3-A0B2-415B-BA1C-AA09D9451C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5700:*:*:*:*:*:*","matchCriteriaId":"1E270FB5-C447-4C93-9947-2CE50850A46B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5710:*:*:*:*:*:*","matchCriteriaId":"496AFB26-1E11-4632-8C10-CD80F601FCFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5711:*:*:*:*:*:*","matchCriteriaId":"B2CE86DA-B688-4E9E-AF16-1974858D18BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5712:*:*:*:*:*:*","matchCriteriaId":"4BFA2F57-4506-4B3D-86E8-BE9BEC1134B4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*","versionEndExcluding":"12.1","matchCriteriaId":"76C7DC97-8BF1-421F-9272-FD301D2D7A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12100:*:*:*:*:*:*","matchCriteriaId":"9BE65B96-74ED-48F1-B86D-CB3387D989CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12101:*:*:*:*:*:*","matchCriteriaId":"B4127640-1F60-4687-A24A-22B05A125290"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12110:*:*:*:*:*:*","matchCriteriaId":"E42928FB-E0E7-4951-B9B1-CEF60560A945"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12120:*:*:*:*:*:*","matchCriteriaId":"43C059E6-E1CA-4792-B383-93062CD82D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12121:*:*:*:*:*:*","matchCriteriaId":"8D21A9EB-51BC-4EEA-BAA4-8C2096A9DDD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12122:*:*:*:*:*:*","matchCriteriaId":"6C34175B-0978-4207-BFC0-F38FDFF9B3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12123:*:*:*:*:*:*","matchCriteriaId":"6CAB911E-5CE6-47BA-9909-C42BDFEE0F5E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"14.0","matchCriteriaId":"FB1A6B88-6EE0-41F2-9FB6-243DFB52F92A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*","matchCriteriaId":"23A6549A-A30E-4693-9BAB-2685DB8C40BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*","matchCriteriaId":"71CED256-A0EF-4933-AE18-421E37D5DB16"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*","matchCriteriaId":"2EEAFF47-78C6-4F48-BD89-CD2B02D420DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*","matchCriteriaId":"E3E8FEC0-688A-4BA6-9B4A-C59AD7FDAF8F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*","versionEndExcluding":"13.0","matchCriteriaId":"969E1FCF-76A0-40BC-A38F-56FCB713419F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:*","matchCriteriaId":"298E6401-A9A9-43B6-901F-327944E0AF94"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:*","matchCriteriaId":"35366F60-D6E2-4B29-B593-D24079CE6831"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:*","matchCriteriaId":"CB60E016-82DD-41EC-85F9-D4F37AF1F8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:*","matchCriteriaId":"9B83E37C-B1F6-4CEB-8A8E-39E24BE8B59C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11020:*:*:*:*:*:*","matchCriteriaId":"80B62BA0-2CF1-4828-99A9-7DD13CFCB9BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11021:*:*:*:*:*:*","matchCriteriaId":"7F529DB6-4D30-49F8-BFE2-C10C1A899917"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11022:*:*:*:*:*:*","matchCriteriaId":"4EA25296-8163-4C98-A8CD-35834240308E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11024:*:*:*:*:*:*","matchCriteriaId":"33D51403-A976-4EA3-AA23-C699E03239E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11025:*:*:*:*:*:*","matchCriteriaId":"D86A2E8A-1689-4E6E-B50B-E16CBCEB0C23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_application_control_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.2220.18","matchCriteriaId":"470ACB71-9439-4CC9-B88B-B9AB5455EA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_browser_security_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.2238.6","matchCriteriaId":"98FAA4DE-2C24-4ED4-9F2C-84CEA3200E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_device_control_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.2220.18","matchCriteriaId":"8239C2A0-BA6D-4B5C-B02F-617178685D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_endpoint_dlp_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.2137.6","matchCriteriaId":"4CA4E3A8-CAB3-461E-8A99-F7D115B17E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_os_deployer:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.2243.1","matchCriteriaId":"53EC71FA-E248-4DA5-BA76-746631AC435E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_patch_manager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.2220.18","matchCriteriaId":"5784980D-CEBB-4982-BD1F-FD8F5F2A039C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_remote_access_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.2228.11","matchCriteriaId":"06A9F459-2C86-4646-B87C-A55381E0939F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_remote_monitoring_and_management_central:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.41","matchCriteriaId":"5D851B9A-EE8F-4634-A26D-BCC44B5CF02A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_vulnerability_manager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"10.1.2220.18","matchCriteriaId":"450E672F-FA36-4770-87B6-CC8DA66D2222"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/170882/Zoho-ManageEngine-ServiceDesk-Plus-14003-Remote-Code-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170925/ManageEngine-ADSelfService-Plus-Unauthenticated-SAML-Remote-Code-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170943/Zoho-ManageEngine-Endpoint-Central-MSP-10.1.2228.10-Remote-Code-Execution.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://blog.viettelcybersecurity.com/saml-show-stopper/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/apache/santuario-xml-security-java/tags?after=1.4.6","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://github.com/horizon3ai/CVE-2022-47966","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-250a","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/170882/Zoho-ManageEngine-ServiceDesk-Plus-14003-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170925/ManageEngine-ADSelfService-Plus-Unauthenticated-SAML-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/170943/Zoho-ManageEngine-Endpoint-Central-MSP-10.1.2228.10-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://blog.viettelcybersecurity.com/saml-show-stopper/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/apache/santuario-xml-security-java/tags?after=1.4.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/horizon3ai/CVE-2022-47966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-250a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-47966","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-29084","sourceIdentifier":"cve@mitre.org","published":"2023-04-13T19:15:11.680","lastModified":"2026-06-17T05:49:19.420","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T16:26:29.516444Z","id":"CVE-2023-29084","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*","matchCriteriaId":"34A48841-EA09-4917-A6FF-DF645B581426"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*","matchCriteriaId":"1C042646-9D36-4712-9E5D-40E55FCF7C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*","matchCriteriaId":"9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*","matchCriteriaId":"77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*","matchCriteriaId":"7E53B3CB-4351-4E24-B80C-D62CC483D4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*","matchCriteriaId":"0068E901-62D2-4C4D-96F8-7823B0DF7DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*","matchCriteriaId":"CF70BA56-3478-4DA5-B013-4D9B820D2219"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*","matchCriteriaId":"28E1833F-24C8-44EC-9B66-4D832AB1C9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*","matchCriteriaId":"7DCA2AF7-8732-4095-BB6F-6F40EADD7449"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*","matchCriteriaId":"54247785-E55A-407D-A667-1734E7C84DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*","matchCriteriaId":"5C8887B2-D378-4A7D-B678-9B2C68953E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*","matchCriteriaId":"ADD4EAD7-275A-4467-9217-102051BE49C6"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-Injection.html","source":"cve@mitre.org"},{"url":"https://manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-35786","sourceIdentifier":"cve@mitre.org","published":"2023-07-05T06:15:21.090","lastModified":"2026-06-17T06:05:12.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-22T15:44:20.332306Z","id":"CVE-2023-35786","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*","matchCriteriaId":"34A48841-EA09-4917-A6FF-DF645B581426"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*","matchCriteriaId":"1C042646-9D36-4712-9E5D-40E55FCF7C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*","matchCriteriaId":"9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*","matchCriteriaId":"77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*","matchCriteriaId":"7E53B3CB-4351-4E24-B80C-D62CC483D4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*","matchCriteriaId":"0068E901-62D2-4C4D-96F8-7823B0DF7DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*","matchCriteriaId":"CF70BA56-3478-4DA5-B013-4D9B820D2219"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*","matchCriteriaId":"28E1833F-24C8-44EC-9B66-4D832AB1C9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*","matchCriteriaId":"7DCA2AF7-8732-4095-BB6F-6F40EADD7449"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*","matchCriteriaId":"54247785-E55A-407D-A667-1734E7C84DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*","matchCriteriaId":"5C8887B2-D378-4A7D-B678-9B2C68953E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*","matchCriteriaId":"ADD4EAD7-275A-4467-9217-102051BE49C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7181:*:*:*:*:*:*","matchCriteriaId":"8181AF41-779F-4289-BECE-03C2731FDA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7182:*:*:*:*:*:*","matchCriteriaId":"2BFB486E-9256-4B56-98BF-24B5A56415A2"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-35786.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-35786.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-38332","sourceIdentifier":"cve@mitre.org","published":"2023-08-04T18:15:13.910","lastModified":"2026-06-17T06:09:56.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure."},{"lang":"es","value":"ADManager Plus de ManageEngine de Zoho a través de 7201 permiten a los usuarios autenticados hacerse cargo de la cuenta de otro usuario a través de la divulgación de información sensible."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-17T15:13:45.987236Z","id":"CVE-2023-38332","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"}]}]}],"references":[{"url":"https://manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38332.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-31492","sourceIdentifier":"cve@mitre.org","published":"2023-08-17T23:15:09.167","lastModified":"2026-06-17T05:57:06.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users."},{"lang":"es","value":"ADManager Plus versión 7182 y anteriores de ManageEngine de Zoho divulgaron las contraseñas predeterminadas para la restauración de cuentas de dominios no autorizadas a los usuarios autenticados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-26T21:34:54.528803Z","id":"CVE-2023-31492","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","matchCriteriaId":"B9D72627-17F9-427E-907B-56EA0A498131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*","matchCriteriaId":"34A48841-EA09-4917-A6FF-DF645B581426"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*","matchCriteriaId":"1C042646-9D36-4712-9E5D-40E55FCF7C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*","matchCriteriaId":"9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*","matchCriteriaId":"77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*","matchCriteriaId":"7E53B3CB-4351-4E24-B80C-D62CC483D4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*","matchCriteriaId":"0068E901-62D2-4C4D-96F8-7823B0DF7DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*","matchCriteriaId":"CF70BA56-3478-4DA5-B013-4D9B820D2219"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*","matchCriteriaId":"28E1833F-24C8-44EC-9B66-4D832AB1C9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*","matchCriteriaId":"7DCA2AF7-8732-4095-BB6F-6F40EADD7449"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*","matchCriteriaId":"54247785-E55A-407D-A667-1734E7C84DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*","matchCriteriaId":"5C8887B2-D378-4A7D-B678-9B2C68953E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*","matchCriteriaId":"ADD4EAD7-275A-4467-9217-102051BE49C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7181:*:*:*:*:*:*","matchCriteriaId":"8181AF41-779F-4289-BECE-03C2731FDA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7182:*:*:*:*:*:*","matchCriteriaId":"2BFB486E-9256-4B56-98BF-24B5A56415A2"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html","source":"cve@mitre.org"},{"url":"https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-35785","sourceIdentifier":"cve@mitre.org","published":"2023-08-28T20:15:08.033","lastModified":"2026-06-17T06:05:12.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability."},{"lang":"es","value":"Zoho ManageEngine Active Directory 360 versiones 4315 e inferiores, ADAudit Plus 7202 e inferiores, ADManager Plus 7200 e inferiores, Asset Explorer 6993 e inferiores y 7xxx 7002 e inferiores, Cloud Security Plus 4161 e inferiores, Data Security Plus 6110 e inferiores, Eventlog Analyzer 12301 y siguientes, Exchange Reporter Plus 5709 y siguientes, Log360 5315 y siguientes, Log360 UEBA 4045 y siguientes, M365 Manager Plus 4529 y siguientes, M365 Security Plus 4529 y siguientes, Recovery Manager Plus 6061 y siguientes, ServiceDesk Plus 14204 y siguientes y 143xx 14302 e inferiores, ServiceDesk Plus MSP 14300 e inferiores, SharePoint Manager Plus 4402 e inferiores, y Support Center Plus 14300 e inferiores son vulnerables a la omisión de 2FA a través de algunos autenticadores TOTP. Nota: Se requiere un par válido de nombre de usuario y contraseña para aprovechar esta vulnerabilidad.\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"D2B1FA6A-43DB-4CCC-AC05-77810ED7B80D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4300:*:*:*:*:*:*","matchCriteriaId":"1179FC2E-0FCC-4744-85A7-1D68AE742FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4302:*:*:*:*:*:*","matchCriteriaId":"F05F8E9D-1880-4B94-922E-BA61FA112945"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4303:*:*:*:*:*:*","matchCriteriaId":"F336B0C2-1F99-4BC7-828B-02E432CB0723"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4304:*:*:*:*:*:*","matchCriteriaId":"CBBA787F-7F38-4AD3-90BE-D307D75F1BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4305:*:*:*:*:*:*","matchCriteriaId":"46A96B82-49E1-4392-BDCF-CC9753D67A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4306:*:*:*:*:*:*","matchCriteriaId":"837BF464-6D18-4267-8913-D7937C91789B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4308:*:*:*:*:*:*","matchCriteriaId":"0243CA85-B856-4ED9-BCD0-5EAB182862CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4309:*:*:*:*:*:*","matchCriteriaId":"FB216CD0-B3BD-434D-8FC6-BB60408C128A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4310:*:*:*:*:*:*","matchCriteriaId":"9A24DBF5-EBC0-49DB-B253-1098BF1C6180"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4312:*:*:*:*:*:*","matchCriteriaId":"9E5C2FC4-A020-42C8-958D-603C82E9F0B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4313:*:*:*:*:*:*","matchCriteriaId":"D94DE7F6-9231-48F5-8B3F-D8D34594CBB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4314:*:*:*:*:*:*","matchCriteriaId":"27C465F6-F7F2-4FBD-B12F-4795EB47842C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4315:*:*:*:*:*:*","matchCriteriaId":"27BCB134-B415-481F-BBDB-650F5AD65EDA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"E802FD77-E67A-438C-82CE-9FC7536FB14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"0FAF63F4-AED2-4EA4-BA5B-45961B2E29B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"237AA2F5-B9A3-4C40-92AC-61FE47A017BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.2:7202:*:*:*:*:*:*","matchCriteriaId":"4C23A64C-65CB-447B-9B5F-4BB22F68FC79"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9","matchCriteriaId":"A6DEEF51-0977-4061-9919-803DFD144E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:-:*:*:*:*:*:*","matchCriteriaId":"258BF334-DE00-472D-BD94-C0DF8CDAF53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*","matchCriteriaId":"7D0754D0-5B28-4851-89A2-DC5B20CFF3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*","matchCriteriaId":"6E0CAA5B-16A1-4637-B90A-BFAF7381CCD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*","matchCriteriaId":"48A960D7-7AB2-43F4-99FC-5B1FE69BFDB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*","matchCriteriaId":"B293513C-9ECB-4512-B1B8-A470C6115458"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*","matchCriteriaId":"5D9B89EB-C51F-4A70-A6DF-1BD326308DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*","matchCriteriaId":"9B708143-01B3-45D0-A769-E1D8E99237B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*","matchCriteriaId":"F1837C80-7D1F-4AF5-BF4B-932DF03D6A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*","matchCriteriaId":"4E528B83-1539-4516-9ACF-A05E853014DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*","matchCriteriaId":"CBFB65BC-5B94-4075-BBB1-4CD8B5B216C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*","matchCriteriaId":"7FAF3DFA-78FB-417C-808A-507F66889913"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*","matchCriteriaId":"E9506197-CDDA-451B-9FE3-72B3C3BA19EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*","matchCriteriaId":"691DF8EC-6A7A-4449-8A4C-79F76726D685"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*","matchCriteriaId":"0B3E2B0A-EB1E-45C3-BC2C-9E32268A0867"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*","matchCriteriaId":"E1BD2753-52B8-4EB0-8332-C67935FB8B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*","matchCriteriaId":"E8BD08BF-4E5D-4DE4-A499-B0296C126599"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*","matchCriteriaId":"F13CB227-496C-4777-BE76-27AFF5ED15C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*","matchCriteriaId":"2AB1DF8F-3385-40C6-92C5-10724F8A6911"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*","matchCriteriaId":"C1997DE8-8CFA-4882-9107-741B88339A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*","matchCriteriaId":"148F6458-136D-4612-9619-F51AEEC11AA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*","matchCriteriaId":"8B189696-D6BC-475B-90CA-AF122224FEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*","matchCriteriaId":"477C97EC-A497-4C7C-973B-2C057A9242AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*","matchCriteriaId":"284F5D9D-F23F-4936-B461-10701CC3AB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*","matchCriteriaId":"74CE0145-F165-4FB4-A819-01B30641196A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*","matchCriteriaId":"CA291C44-616B-45D9-9709-61CD33E8B135"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*","matchCriteriaId":"C1C7492E-5D5B-419D-9749-7CC6EE5BC0FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*","matchCriteriaId":"DCF1B243-DA58-42CD-9DF4-6D4A010796D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*","matchCriteriaId":"2B73FD0F-6B48-406E-AB29-606CC07C81C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*","matchCriteriaId":"CED2C49D-DB96-4495-BD6F-460871D94EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*","matchCriteriaId":"C9AAC638-1379-4F87-9BA3-07CE16CAB98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*","matchCriteriaId":"B3470B5B-B8BC-41B9-8CA5-5E7A0EB9934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*","matchCriteriaId":"3A2D9355-B1D5-4B14-8900-42E7C8DC5E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6983:*:*:*:*:*:*","matchCriteriaId":"03A34ED3-EC89-4BE3-8A99-A5727A154672"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6984:*:*:*:*:*:*","matchCriteriaId":"4E84EF2B-37A5-4499-8C16-877E8AB8A731"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6985:*:*:*:*:*:*","matchCriteriaId":"1FDA22C3-8F1E-45C9-BC8D-C3A49EFA348C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6986:*:*:*:*:*:*","matchCriteriaId":"DDA5504A-8BD9-4C0D-AD5A-4CB188A99563"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6987:*:*:*:*:*:*","matchCriteriaId":"2E4E1A50-A366-4D5E-9DDB-B33D1D1770E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6988:*:*:*:*:*:*","matchCriteriaId":"356CA7C7-993F-4D5D-9FAB-9E5475878D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6989:*:*:*:*:*:*","matchCriteriaId":"82F1AAC1-E49B-4580-9569-AD9B1E649A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6990:*:*:*:*:*:*","matchCriteriaId":"D971F57C-820C-4391-A15C-80A4901BC358"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6991:*:*:*:*:*:*","matchCriteriaId":"3EAA3D29-2763-4201-9471-A0874727F40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6992:*:*:*:*:*:*","matchCriteriaId":"B632C001-CE54-4C22-AB99-7919D8902FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6993:*:*:*:*:*:*","matchCriteriaId":"648277D7-3CDD-455B-95D3-CBD9A3A82C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:7.0:7000:*:*:*:*:*:*","matchCriteriaId":"1E01D48C-A95F-421E-A6FA-D299D6BE02B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_assetexplorer:7.0:7001:*:*:*:*:*:*","matchCriteriaId":"727BD3A4-F0E1-4656-A640-B32406324707"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1","matchCriteriaId":"5618AEE3-0F6A-47CC-9783-DF9B5C8AC12F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4100:*:*:*:*:*:*","matchCriteriaId":"BFD452AD-7053-4C13-97DA-326C3DC6E26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4101:*:*:*:*:*:*","matchCriteriaId":"0B87956F-9C45-4A65-BEB2-77A247BD7A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4102:*:*:*:*:*:*","matchCriteriaId":"17BE6347-1605-47DB-8CFE-B587E3AB4223"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4103:*:*:*:*:*:*","matchCriteriaId":"C47F9F56-B1DE-426B-B5CF-A1BB5973D6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4104:*:*:*:*:*:*","matchCriteriaId":"E6A7C5C6-0137-4279-A7EA-3439BE477A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4105:*:*:*:*:*:*","matchCriteriaId":"C921F1B2-69B4-448F-AC7C-2F4474507FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4106:*:*:*:*:*:*","matchCriteriaId":"91DB9017-1BCF-48DB-97AE-4214150BAE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4107:*:*:*:*:*:*","matchCriteriaId":"D066B999-8554-49F0-92C3-1A4DDEA6E32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4108:*:*:*:*:*:*","matchCriteriaId":"635F80E1-4A73-48DC-A128-D61716D70839"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4109:*:*:*:*:*:*","matchCriteriaId":"E74FE1C4-471A-4040-96A4-0BE46745199B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4110:*:*:*:*:*:*","matchCriteriaId":"C31E2485-2F3A-4BC1-92CC-F7DCB464B5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4111:*:*:*:*:*:*","matchCriteriaId":"99C928C2-4711-4765-BDF2-E7FB448F5771"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4112:*:*:*:*:*:*","matchCriteriaId":"EDF77387-21C7-45CA-B843-EBA956EE2BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4113:*:*:*:*:*:*","matchCriteriaId":"5C2C0067-538B-4102-8B4E-603BD4CE8F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4115:*:*:*:*:*:*","matchCriteriaId":"DAF47C10-AAE9-40CF-A033-44D54A81E69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4116:*:*:*:*:*:*","matchCriteriaId":"36D0331C-58EA-4B68-88C4-7A193BE5C62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4117:*:*:*:*:*:*","matchCriteriaId":"3CA59781-E48C-487E-B3AF-96560F3152EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4118:*:*:*:*:*:*","matchCriteriaId":"E4812B9E-15CA-4700-9115-EAE0A97F0E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4119:*:*:*:*:*:*","matchCriteriaId":"CE513A2B-0371-4D3C-A502-CDA3DB474F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4120:*:*:*:*:*:*","matchCriteriaId":"5E498ACE-8332-4824-9AFE-73975D0AC9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4121:*:*:*:*:*:*","matchCriteriaId":"F070B928-CF57-4502-BE26-AD3F13A6ED4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4122:*:*:*:*:*:*","matchCriteriaId":"635D24F2-9C60-4E1A-BD5F-E5312FA953A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4130:*:*:*:*:*:*","matchCriteriaId":"5E983854-36F8-407F-95C8-E386E0F82366"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4131:*:*:*:*:*:*","matchCriteriaId":"29BFE206-CAB1-41CA-B5A5-E8CB67BCCA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4140:*:*:*:*:*:*","matchCriteriaId":"7820751F-E181-4BB7-8DAF-BF21129B24D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4141:*:*:*:*:*:*","matchCriteriaId":"14ADB666-EEB9-4C6D-93F4-5A45EBA55705"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4150:*:*:*:*:*:*","matchCriteriaId":"93C4B398-8F9A-44AC-8E43-C4C471DE9565"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4160:*:*:*:*:*:*","matchCriteriaId":"47FD0E59-3D75-4CF5-81A6-20C3B7FDE962"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_cloud_security_plus:4.1:4161:*:*:*:*:*:*","matchCriteriaId":"C7EF76FE-3FD9-4548-A372-22E280484ECB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1","matchCriteriaId":"93C3ECBE-AE6A-4E5B-822B-2F905AA806DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.1:6100:*:*:*:*:*:*","matchCriteriaId":"DFEB1B4D-A7B2-464A-BEA7-5754D3BE1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.1:6101:*:*:*:*:*:*","matchCriteriaId":"C12C9470-3D3B-426E-93F9-79D8B9B25F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_datasecurity_plus:6.1:6110:*:*:*:*:*:*","matchCriteriaId":"227F1242-E0A9-45C5-9198-FD8D01F68ABF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*","versionEndExcluding":"12.3.0","matchCriteriaId":"1D262240-1B28-4B7C-B673-C10DD878D912"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.3.0:12300:*:*:*:*:*:*","matchCriteriaId":"39F6B49B-8531-4A62-B0D9-C1BCD728D4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.3.0:12301:*:*:*:*:*:*","matchCriteriaId":"F2769404-4E8A-478C-9328-269E2C334E31"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7","matchCriteriaId":"3DA0580F-8167-450E-A1E9-0F1F7FC7E2C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5700:*:*:*:*:*:*","matchCriteriaId":"E913F3D6-9F94-4130-94FF-37F4D81BAEF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5701:*:*:*:*:*:*","matchCriteriaId":"34D23B58-2BB8-40EE-952C-1595988335CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5702:*:*:*:*:*:*","matchCriteriaId":"322920C4-4487-4E44-9C40-2959F478A4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5703:*:*:*:*:*:*","matchCriteriaId":"3AD735B9-2CE2-46BA-9A14-A22E3FE21C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5704:*:*:*:*:*:*","matchCriteriaId":"014DB85C-DB28-4EBB-971A-6F8F964CE6FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5705:*:*:*:*:*:*","matchCriteriaId":"5E9B0013-ABF8-4616-BC92-15DF9F5CB359"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5706:*:*:*:*:*:*","matchCriteriaId":"5B744F32-FD43-47B8-875C-6777177677CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5707:*:*:*:*:*:*","matchCriteriaId":"F1BB6EEA-2BAA-4C48-8DA8-1E87B3DE611F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5708:*:*:*:*:*:*","matchCriteriaId":"D3012C17-87F5-4FFD-B67B-BEFF2A390613"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_exchange_reporter_plus:5.7:5709:*:*:*:*:*:*","matchCriteriaId":"1E33D368-2D81-4C7E-9405-7C0A86E97217"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:*:*:*:*:*:*:*:*","versionEndExcluding":"5.3","matchCriteriaId":"30B83EF5-BEF1-4636-9B3C-AE41E6010F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5300:*:*:*:*:*:*","matchCriteriaId":"CF4D70E8-77A6-4F51-A15B-28299D43B095"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5301:*:*:*:*:*:*","matchCriteriaId":"E03D403B-C904-482E-838C-D6595C5D27FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5302:*:*:*:*:*:*","matchCriteriaId":"FFEB1CB7-B9F7-463D-88F8-3A2E86264FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5305:*:*:*:*:*:*","matchCriteriaId":"E4B18DCB-4A02-4DE6-9B19-D79299934D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5310:*:*:*:*:*:*","matchCriteriaId":"2D34C6F9-2578-460F-AF34-2E9494BCDE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5311:*:*:*:*:*:*","matchCriteriaId":"48E3DA1B-9FC6-4F07-9F89-6D71EF42FCFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360:5.3:build5315:*:*:*:*:*:*","matchCriteriaId":"B2F48B91-FFD5-4AC4-A198-64870E47AE9A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4010:*:*:*:*:*:*","matchCriteriaId":"7001A0A7-159C-48A3-9800-DAFBA31D05BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4011:*:*:*:*:*:*","matchCriteriaId":"583B46D4-529F-404F-9CF3-4D7526889682"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4015:*:*:*:*:*:*","matchCriteriaId":"0D89C2A2-CE20-4954-8821-C73F9E3EC767"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4016:*:*:*:*:*:*","matchCriteriaId":"A6B8B05F-0ECD-41C1-9FFD-0ADCF4046D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4020:*:*:*:*:*:*","matchCriteriaId":"233874F0-A19F-447C-ACE2-5DD06829C920"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4021:*:*:*:*:*:*","matchCriteriaId":"C4447E47-C6DB-440D-AF35-8130687E9BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4023:*:*:*:*:*:*","matchCriteriaId":"405ECB05-7E35-4927-A19A-92A4B7FE8B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4024:*:*:*:*:*:*","matchCriteriaId":"9F1EC2A5-7498-40F9-91A4-B004AEA1136C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4025:*:*:*:*:*:*","matchCriteriaId":"CEBB1CED-7B88-4E4B-89E8-E0E2B882E34C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4026:*:*:*:*:*:*","matchCriteriaId":"DD3B14B6-8329-43C4-AE42-13279E77275E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4027:*:*:*:*:*:*","matchCriteriaId":"7792B448-4D34-42F8-919C-344783D625E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4028:*:*:*:*:*:*","matchCriteriaId":"E297C040-0523-4A50-97AB-349880D5B3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4030:*:*:*:*:*:*","matchCriteriaId":"F86FEB8D-8A75-4C92-947D-CA7EDF8E0F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4031:*:*:*:*:*:*","matchCriteriaId":"A238ED1B-6C11-44C9-BDBF-8A724AB7FE1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4034:*:*:*:*:*:*","matchCriteriaId":"8ADCADB6-9764-4CA8-AB54-BCE6D0363E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4035:*:*:*:*:*:*","matchCriteriaId":"6E0C9493-EB87-4197-AF8B-BCA25488BCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4036:*:*:*:*:*:*","matchCriteriaId":"E4FD31D3-69EB-4699-B31B-C18A0EA9D9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4040:*:*:*:*:*:*","matchCriteriaId":"FBD7855F-4B66-4F43-960C-73E69C52E865"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4043:*:*:*:*:*:*","matchCriteriaId":"0C9C8B4D-CFFE-4CB4-8F11-FC778462CB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_log360_ueba:4.0:build4045:*:*:*:*:*:*","matchCriteriaId":"36A68C2E-978A-4F82-AC61-E9E7CA9908A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5","matchCriteriaId":"A9BB59DF-8786-4DC0-9254-F88417CA7077"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4500:*:*:*:*:*:*","matchCriteriaId":"6BA1E99E-789C-4FDD-AA89-4C5391B95320"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4502:*:*:*:*:*:*","matchCriteriaId":"7EA6EC34-6702-4D1A-8C63-5026416E01A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4503:*:*:*:*:*:*","matchCriteriaId":"0720F912-A070-43E9-BD23-4FAD00026DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4504:*:*:*:*:*:*","matchCriteriaId":"161C81D2-7281-4F89-9944-1B468B06C264"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4505:*:*:*:*:*:*","matchCriteriaId":"718EEA01-B792-4B7E-946F-863F846E8132"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4507:*:*:*:*:*:*","matchCriteriaId":"DB72E7C9-FAC6-43E8-AC2A-5A7CBEAB919E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4508:*:*:*:*:*:*","matchCriteriaId":"47BBC46A-16C7-4E9B-A49A-8101F3039D0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4509:*:*:*:*:*:*","matchCriteriaId":"D989FB08-624D-406B-8F53-A387900940F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4510:*:*:*:*:*:*","matchCriteriaId":"8ADB6CFE-1915-488C-93FE-96E8DF3655F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4511:*:*:*:*:*:*","matchCriteriaId":"EDCCB442-D0E4-47C7-A558-36657A70B3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4512:*:*:*:*:*:*","matchCriteriaId":"8794F807-1D50-44D4-8969-FD68EFF2F643"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4513:*:*:*:*:*:*","matchCriteriaId":"AFA2B4BA-1FBF-4C2E-872E-AD14084D1D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4514:*:*:*:*:*:*","matchCriteriaId":"6976DCDA-E27A-4367-8EFE-74DC6F63018F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4516:*:*:*:*:*:*","matchCriteriaId":"101908A5-CAEF-44F8-A6C8-FE01CA9FA836"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4517:*:*:*:*:*:*","matchCriteriaId":"F957BE56-474A-4593-8710-F86DB13C7407"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4518:*:*:*:*:*:*","matchCriteriaId":"B8479442-1A4A-4F27-9778-664C7693C815"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4519:*:*:*:*:*:*","matchCriteriaId":"EEF00ADC-105F-4B7E-857B-17565D67C7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4520:*:*:*:*:*:*","matchCriteriaId":"CA292949-6E99-49A5-94F7-23448494F5C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4523:*:*:*:*:*:*","matchCriteriaId":"863CBE20-60A5-4A08-BF16-4E40E88B9AB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4525:*:*:*:*:*:*","matchCriteriaId":"28A105B4-7BF0-4054-AAE7-8453E13E2B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4527:*:*:*:*:*:*","matchCriteriaId":"94C78301-44B7-45B2-836E-15E45FAC8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4528:*:*:*:*:*:*","matchCriteriaId":"F408067C-13C1-40BE-8488-9EB7FF0EDF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:4.5:build4529:*:*:*:*:*:*","matchCriteriaId":"A83FBC34-E024-47DA-AD8A-BF569F1F7EE9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5","matchCriteriaId":"E4282B6D-6C85-4F13-B789-E641FB5986FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4500:*:*:*:*:*:*","matchCriteriaId":"A160274C-F07A-43D9-A4DB-8773F004B9B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4502:*:*:*:*:*:*","matchCriteriaId":"341DF953-3DC7-476E-A79D-8CBD011C52A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4503:*:*:*:*:*:*","matchCriteriaId":"AB6582AC-03DB-4905-BD03-EEDC314EB289"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4504:*:*:*:*:*:*","matchCriteriaId":"2C3F1FDE-41F7-4541-B0F7-00DB7994ACB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4505:*:*:*:*:*:*","matchCriteriaId":"92ADF3D2-0051-46E9-BF7A-7D429ABEC09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4507:*:*:*:*:*:*","matchCriteriaId":"1592B321-1D60-418D-9CD8-61AEA57D8D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4508:*:*:*:*:*:*","matchCriteriaId":"E582FA9F-A043-4193-961D-A49159F1C921"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4509:*:*:*:*:*:*","matchCriteriaId":"F3A22F3D-C45F-4FD5-8EEC-3BF2EDA807A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4510:*:*:*:*:*:*","matchCriteriaId":"28EAB920-2F01-483E-9492-97DBFBD7535F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4511:*:*:*:*:*:*","matchCriteriaId":"92F1D0A8-8761-4876-92C1-EE9F6BF61C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4512:*:*:*:*:*:*","matchCriteriaId":"37976BE2-4233-46F7-B6BB-EFA778442AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4513:*:*:*:*:*:*","matchCriteriaId":"A0FF0731-4694-427A-8C9A-EBA7AEF6F1D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4514:*:*:*:*:*:*","matchCriteriaId":"C069FF04-4061-4560-BA55-1784312047A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4516:*:*:*:*:*:*","matchCriteriaId":"0D428FA6-08BA-4F7E-B1C7-4AFD17919899"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4517:*:*:*:*:*:*","matchCriteriaId":"C7AB124C-63E2-4CC2-B5C9-E7141E23D56C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4518:*:*:*:*:*:*","matchCriteriaId":"0E2D49D5-6F95-42F5-8EF0-DAD47C51D141"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4519:*:*:*:*:*:*","matchCriteriaId":"EF9477F5-C6FD-4589-917B-FD206371DB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4520:*:*:*:*:*:*","matchCriteriaId":"B51D61F5-7198-4B33-8AFD-A78E34F6B1AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4523:*:*:*:*:*:*","matchCriteriaId":"8CB27467-3157-466A-B01C-461348BD95C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4525:*:*:*:*:*:*","matchCriteriaId":"2D575B4D-D58A-4B92-9723-4AB54E29924A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4527:*:*:*:*:*:*","matchCriteriaId":"E76BB070-9BC9-4712-B021-156871C3B06A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4528:*:*:*:*:*:*","matchCriteriaId":"52D35850-9BE1-479A-B0AF-339E42BCA708"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_m365_security_plus:4.5:4529:*:*:*:*:*:*","matchCriteriaId":"681A77B6-7E22-4132-803B-A0AD117CE7C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0","matchCriteriaId":"658DC76D-E0FE-40FA-B966-6DA6ED531FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6001:*:*:*:*:*:*","matchCriteriaId":"948993BE-7B9E-4CCB-A97F-28B46DFE52A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6003:*:*:*:*:*:*","matchCriteriaId":"9F8D6CDF-1BD5-4457-94AA-CFCC351F55A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6005:*:*:*:*:*:*","matchCriteriaId":"E54CE38D-C9CA-4CC1-B3BC-83F593A576D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6011:*:*:*:*:*:*","matchCriteriaId":"4C8B3F77-7886-4F80-B75A-59063C762307"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6016:*:*:*:*:*:*","matchCriteriaId":"ADCB6ADF-5B04-4682-B541-4BC8BB5762DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6017:*:*:*:*:*:*","matchCriteriaId":"A708628C-31E8-4A52-AEF7-297E2DDFA0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6020:*:*:*:*:*:*","matchCriteriaId":"A8A01385-A493-42C0-ABBE-6A30C8594F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6025:*:*:*:*:*:*","matchCriteriaId":"E7A6CA95-9572-4FCA-ADD2-A5F4D8C2216B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6026:*:*:*:*:*:*","matchCriteriaId":"B6865936-A773-4353-8891-8269508B2180"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6030:*:*:*:*:*:*","matchCriteriaId":"9CAD778E-8FDB-4CE2-A593-75EEA75F6361"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6031:*:*:*:*:*:*","matchCriteriaId":"52A9BA64-A248-4490-BDA7-671D64C0B3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6032:*:*:*:*:*:*","matchCriteriaId":"DFF0A7E8-888B-4CBE-B799-16557244DDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6041:*:*:*:*:*:*","matchCriteriaId":"8B480202-7632-4CFA-A485-DDFF1D1DB757"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6042:*:*:*:*:*:*","matchCriteriaId":"AB9B0721-49FD-49E7-97E4-E4E3EBF64856"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6043:*:*:*:*:*:*","matchCriteriaId":"874F5DDD-EA8D-4C1E-824A-321C52959649"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6044:*:*:*:*:*:*","matchCriteriaId":"8CAA4713-DA95-46AC-AFA5-9D22F8819B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6047:*:*:*:*:*:*","matchCriteriaId":"C9D4BB2E-D0D0-4058-88C9-3E73A793A85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6049:*:*:*:*:*:*","matchCriteriaId":"832AAAAF-5C34-4DDF-96A4-080002F9BC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6050:*:*:*:*:*:*","matchCriteriaId":"29ED63C4-FB06-41AC-ABCD-63B3233658A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6051:*:*:*:*:*:*","matchCriteriaId":"6EEA1BA5-F6A7-4BE0-8E77-993FB9E5CC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6053:*:*:*:*:*:*","matchCriteriaId":"2C21AC8A-8358-46BE-A0C6-7CDEF1E73904"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6054:*:*:*:*:*:*","matchCriteriaId":"51400F37-6310-44A3-A683-068DF64D20F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6056:*:*:*:*:*:*","matchCriteriaId":"F3F43DBF-CD65-47D0-8CEE-D5EE8337188B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6057:*:*:*:*:*:*","matchCriteriaId":"78CB8751-856A-41AC-904A-70FA1E15A946"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6058:*:*:*:*:*:*","matchCriteriaId":"72B7E27E-1443-46DC-8389-FBD337E612F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6060:*:*:*:*:*:*","matchCriteriaId":"F9BB1077-C1F5-4368-9930-8E7424E7EB98"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_recoverymanager_plus:6.0:build6061:*:*:*:*:*:*","matchCriteriaId":"EE307CE4-574D-4FF7-BED6-5BBECF886578"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"14.2","matchCriteriaId":"D69A22E7-FF66-43A0-83FF-4D0ADF25B33D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.2:14200:*:*:*:*:*:*","matchCriteriaId":"4A89D0AC-E27C-4C35-8E2E-44DF0BBD6FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.2:14201:*:*:*:*:*:*","matchCriteriaId":"19A77447-AA60-4011-A64B-0A065F43279E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.2:14202:*:*:*:*:*:*","matchCriteriaId":"811ADC13-780C-4325-8879-E521CBEC20B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.2:14203:*:*:*:*:*:*","matchCriteriaId":"DB25E317-1104-4CFE-8F6A-B8B55F578F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.2:14204:*:*:*:*:*:*","matchCriteriaId":"8157D1BB-556A-444B-9F4C-0BD0EF4CF02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.3:14300:*:*:*:*:*:*","matchCriteriaId":"E73FEA45-5AA3-4C49-91D3-E07A53E34515"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.3:14301:*:*:*:*:*:*","matchCriteriaId":"8CA65161-0C0B-45E7-BBEA-FA214DBF964B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.3:14302:*:*:*:*:*:*","matchCriteriaId":"9097C0CA-001B-4604-BCDB-ED28AB292CC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3","matchCriteriaId":"CE99DDEC-EA8D-4E15-A227-30B242611078"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.3:14300:*:*:*:*:*:*","matchCriteriaId":"52843587-34AD-4992-8E68-25CD02E247A3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4","matchCriteriaId":"30C9A012-AD39-45B2-BA3F-8D7180FC5390"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4400:*:*:*:*:*:*","matchCriteriaId":"7C5E7CE6-F85E-49B2-9078-F661AA3723C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4401:*:*:*:*:*:*","matchCriteriaId":"1194B4C2-FBF2-4015-B666-235897971DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4402:*:*:*:*:*:*","matchCriteriaId":"4F5F0CA5-CEC3-4342-A7D1-3616C482B965"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"14.3","matchCriteriaId":"4707D700-23C4-4BBD-9683-4E6D59989127"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.3:14300:*:*:*:*:*:*","matchCriteriaId":"39E8C9FE-3C1C-4E32-8BD4-14A88C49F587"}]}]}],"references":[{"url":"https://manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/security/advisory/CVE/CVE-2023-35785.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/security/advisory/CVE/CVE-2023-35785.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-39912","sourceIdentifier":"cve@mitre.org","published":"2023-08-31T23:15:26.297","lastModified":"2026-06-17T06:12:56.557","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus anterior a 7203 permite a los usuarios de Técnico de Mesa de Ayuda leer archivos arbitrarios en la máquina donde está instalado este producto."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-05T19:17:07.493122Z","id":"CVE-2023-39912","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*","matchCriteriaId":"D47DA377-0AF4-453E-9605-A5F87FA14E61"}]}]}],"references":[{"url":"https://manageengine.com","source":"cve@mitre.org","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-39912.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://manageengine.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-39912.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-38743","sourceIdentifier":"cve@mitre.org","published":"2023-09-11T19:15:42.890","lastModified":"2026-06-17T06:11:05.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus anterior a Build 7200 permite a los usuarios administradores ejecutar comandos en la máquina de anfitrión."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:27:04.658440Z","id":"CVE-2023-38743","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38743.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38743.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41904","sourceIdentifier":"cve@mitre.org","published":"2023-09-27T15:19:31.137","lastModified":"2026-06-17T06:23:02.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs."},{"lang":"es","value":"Zoho ManageEngine ADManager Plus anterior a 7203 permite la omisión de 2FA (para la generación de AuthToken) en las API REST."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T14:29:00.373406Z","id":"CVE-2023-41904","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*","matchCriteriaId":"D47DA377-0AF4-453E-9605-A5F87FA14E61"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-41904.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-41904.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48878","sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","published":"2024-11-04T11:15:06.417","lastModified":"2026-06-17T07:58:57.390","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report."},{"lang":"es","value":" Las versiones 7241 y anteriores de Zohocorp ManageEngine ADManager Plus son vulnerables a la inyección SQL en el informe de auditoría archivado."}],"affected":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","affectedData":[{"vendor":"ManageEngine","product":"ADManager Plus","defaultStatus":"unaffected","collectionURL":"https://www.manageengine.com/products/ad-manager/","versions":[{"version":"0","lessThanOrEqual":"7241","versionType":"7241","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"zohocorp","product":"manageengine_admanager_plus","defaultStatus":"unaffected","cpes":["cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"7241","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-04T15:20:43.036499Z","id":"CVE-2024-48878","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*","matchCriteriaId":"D47DA377-0AF4-453E-9605-A5F87FA14E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:*","matchCriteriaId":"BC919233-CE66-416C-8649-B94A23F131F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7210:*:*:*:*:*:*","matchCriteriaId":"AD2880B4-88AD-49E4-B423-5C0CCCF5DF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7211:*:*:*:*:*:*","matchCriteriaId":"C8BCAFB6-F46D-4E09-8827-13ED1A7D5740"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7212:*:*:*:*:*:*","matchCriteriaId":"0D0166A3-B34B-44FC-9DB8-E06BDDAC7CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7220:*:*:*:*:*:*","matchCriteriaId":"CE25B1E5-D380-490C-98A6-121FA10A3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7221:*:*:*:*:*:*","matchCriteriaId":"50283EE9-A9EC-4BD2-958E-F2A278B84C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7222:*:*:*:*:*:*","matchCriteriaId":"645C5636-1E03-47D2-834B-3DE95B347E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7223:*:*:*:*:*:*","matchCriteriaId":"4340408B-3928-430F-BDBA-10E43F25C595"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7224:*:*:*:*:*:*","matchCriteriaId":"C792F787-B6F6-4908-923C-25679BA67988"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7230:*:*:*:*:*:*","matchCriteriaId":"826183CE-C9B9-4C34-8885-3773F42AAAB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7231:*:*:*:*:*:*","matchCriteriaId":"F7A9A00F-1792-4DAA-B393-AFAB279F850C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7232:*:*:*:*:*:*","matchCriteriaId":"250DC9F9-082E-4C3A-B0C4-681C8AFCCD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7240:*:*:*:*:*:*","matchCriteriaId":"308413DB-AB0D-47B1-863E-B6C4B6D88D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7241:*:*:*:*:*:*","matchCriteriaId":"CB2D7A55-BC4E-451C-BA49-AAAA5180724B"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-48878.html","source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-24409","sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","published":"2024-11-08T08:15:15.917","lastModified":"2026-06-17T07:14:25.660","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option."},{"lang":"es","value":"Las versiones 7203 y anteriores de Zohocorp ManageEngine ADManager Plus son vulnerables a la escalada de privilegios en la opción Modificar equipos."}],"affected":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","affectedData":[{"vendor":"ManageEngine","product":"ADManager Plus","defaultStatus":"unaffected","collectionURL":"https://www.manageengine.com/products/ad-manager/","platforms":["Windows"],"versions":[{"version":"0","lessThanOrEqual":"7203","versionType":"7203","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"zohocorp","product":"manageengine_admanager_plus","defaultStatus":"unaffected","cpes":["cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"7203","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-08T14:19:23.042539Z","id":"CVE-2024-24409","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:-:*:*:*:*:*:*","matchCriteriaId":"BCAB5D26-3181-4573-8F1C-B33183C8B4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6100:*:*:*:*:*:*","matchCriteriaId":"2993EF0E-D147-4512-9B5F-3D7E82EAFF39"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6101:*:*:*:*:*:*","matchCriteriaId":"E8ABBE88-E3FC-43B1-A319-C6AE78EF33CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6102:*:*:*:*:*:*","matchCriteriaId":"ED36E8C1-C26D-4A74-8D47-8DBD2BF86D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6103:*:*:*:*:*:*","matchCriteriaId":"8633BC6E-C86B-4D96-876C-3FB7F5133886"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6104:*:*:*:*:*:*","matchCriteriaId":"9B08B585-C379-44FD-BC4E-6C9F3E0FA0BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6105:*:*:*:*:*:*","matchCriteriaId":"394FD156-844D-4CEF-87CA-5A5FB1DBE2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6106:*:*:*:*:*:*","matchCriteriaId":"FF83CF7D-9826-4DB8-9A05-C2260FFA4680"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6107:*:*:*:*:*:*","matchCriteriaId":"6EA114E7-ECBD-4503-86C8-E078805CC49E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6108:*:*:*:*:*:*","matchCriteriaId":"1D9736FE-07FE-47F2-B8D0-25C4D474D1B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6109:*:*:*:*:*:*","matchCriteriaId":"2C9487B6-24B4-4D0A-AB4F-FBC7F068D01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6110:*:*:*:*:*:*","matchCriteriaId":"C31AF224-954D-481C-B52B-092AFCA20077"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6111:*:*:*:*:*:*","matchCriteriaId":"7383E219-4F88-43CF-80D1-85E1AE8C37DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.2:*:*:*:*:*:*:*","matchCriteriaId":"F343A82A-7FD2-4BDC-A537-B6BA38315733"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"E22DD181-25F0-48AE-A86A-753193FE6F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6657:*:*:*:*:*:*","matchCriteriaId":"EC6A1F29-3A46-4BF9-80FD-C8C26EF3F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6660:*:*:*:*:*:*","matchCriteriaId":"85BCE3C0-696E-4805-AA04-42E4234BCD5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F04532BC-FBD0-4111-9213-3F044475CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:-:*:*:*:*:*:*","matchCriteriaId":"E6162E29-CDBE-4AE0-8160-C4D6A99BFE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7000:*:*:*:*:*:*","matchCriteriaId":"4DE6724F-80AA-4B3E-8CF1-1158F6C98AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7010:*:*:*:*:*:*","matchCriteriaId":"A4D9B6E0-47A7-48D1-AF6A-A8512475ABD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7011:*:*:*:*:*:*","matchCriteriaId":"FFD7E625-FAA2-4452-9E18-5E4A61A93FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7020:*:*:*:*:*:*","matchCriteriaId":"8504DAE3-6CD9-4640-9EB1-CB304DB79BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7030:*:*:*:*:*:*","matchCriteriaId":"F42110FC-D21E-439E-BB8C-45C03F639CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7040:*:*:*:*:*:*","matchCriteriaId":"612E5D11-83D1-4E80-B7A4-57F61690DFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7041:*:*:*:*:*:*","matchCriteriaId":"C89C31C7-3196-47CD-9A9D-0761CEEB04E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7050:*:*:*:*:*:*","matchCriteriaId":"821C24DA-1C22-43ED-AD67-E947D323A3A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7051:*:*:*:*:*:*","matchCriteriaId":"FAFEF7B6-4B56-42C8-958B-E0B677F5D150"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7052:*:*:*:*:*:*","matchCriteriaId":"43CEBA06-F115-41E9-8B3E-C004528340A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7053:*:*:*:*:*:*","matchCriteriaId":"E398D48C-AD94-4E84-9E3A-28A8586B3112"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7054:*:*:*:*:*:*","matchCriteriaId":"3D042A11-638F-4485-A753-ACF2BE92D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7055:*:*:*:*:*:*","matchCriteriaId":"6A08DCBD-FB40-4E8D-AA29-E4CA4811FB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7056:*:*:*:*:*:*","matchCriteriaId":"EDEB04D2-0804-49D3-9594-7E71D6ED0710"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7060:*:*:*:*:*:*","matchCriteriaId":"8677DEC0-07FA-4E46-9EB6-B5BD84CA7128"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7061:*:*:*:*:*:*","matchCriteriaId":"9A5D33D3-6A4C-4E31-9F3B-3280DF70DF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7062:*:*:*:*:*:*","matchCriteriaId":"E53B4C3C-7D4B-447B-AA00-E8542071C751"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7063:*:*:*:*:*:*","matchCriteriaId":"6A4BB301-D085-46DF-9C96-B4DE040BA033"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7064:*:*:*:*:*:*","matchCriteriaId":"F39F4354-815C-490C-AE8E-670148FE893F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7065:*:*:*:*:*:*","matchCriteriaId":"A7D0D80C-3267-4D13-83DE-344BCF1FF39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7066:*:*:*:*:*:*","matchCriteriaId":"1D2E1C9F-D239-41BE-B924-E57D30923877"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*","matchCriteriaId":"DB6D57E0-63FB-4ED2-8F7A-D882EB4925BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*","matchCriteriaId":"736740CB-A328-4163-BAC4-6C881A24C8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*","matchCriteriaId":"9B806083-7309-4215-AF81-DCC4D90B7876"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*","matchCriteriaId":"A741CDA8-D1A8-4F83-AE54-7D3D3C433825"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*","matchCriteriaId":"09563D6F-690B-4C7A-BA25-52D009724A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*","matchCriteriaId":"30FAC23B-831E-4904-AB3B-85A3C068CEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*","matchCriteriaId":"9347D3CF-B5D1-4ACE-83E1-73748EF15120"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*","matchCriteriaId":"322E0562-4586-4DF4-A935-C2447883495B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*","matchCriteriaId":"EB9151D6-BD21-4268-9371-FF702C1AD84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*","matchCriteriaId":"B371E93E-7C85-42DD-AA7F-9B43D8D02963"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*","matchCriteriaId":"094EEFA4-BD16-4F79-8133-62F9E2C8C675"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*","matchCriteriaId":"DC5A6297-98E3-45C8-95FB-7F4E65D133BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*","matchCriteriaId":"93C96678-34B7-4FCE-9DBD-1A7B3E0943BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*","matchCriteriaId":"9E9B9E88-919F-4CF7-99DC-72E50BDF65A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*","matchCriteriaId":"7848B31C-AB51-486B-8655-7D7A060BAFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*","matchCriteriaId":"1CFB5C4A-B717-4CC2-AE03-336C63D17B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*","matchCriteriaId":"456D49D7-F04D-4003-B429-8D5504959D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*","matchCriteriaId":"BB788440-904B-430E-BF5B-12ADA816477E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*","matchCriteriaId":"876CC4D6-9546-4D39-965A-EF5A4AF4AD93"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*","matchCriteriaId":"85432FE8-946F-448D-A92A-FF549EDC52F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*","matchCriteriaId":"813E1389-A949-427C-92C6-3974702FEA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*","matchCriteriaId":"34A48841-EA09-4917-A6FF-DF645B581426"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*","matchCriteriaId":"1C042646-9D36-4712-9E5D-40E55FCF7C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*","matchCriteriaId":"9E6CD67A-7F5A-4F29-B563-7E4D72A1149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*","matchCriteriaId":"77A0C792-A8B7-48F8-9AD7-96B0CBAD4EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*","matchCriteriaId":"7E53B3CB-4351-4E24-B80C-D62CC483D4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*","matchCriteriaId":"0068E901-62D2-4C4D-96F8-7823B0DF7DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*","matchCriteriaId":"CF70BA56-3478-4DA5-B013-4D9B820D2219"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*","matchCriteriaId":"28E1833F-24C8-44EC-9B66-4D832AB1C9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*","matchCriteriaId":"7DCA2AF7-8732-4095-BB6F-6F40EADD7449"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*","matchCriteriaId":"54247785-E55A-407D-A667-1734E7C84DF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*","matchCriteriaId":"5C8887B2-D378-4A7D-B678-9B2C68953E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*","matchCriteriaId":"ADD4EAD7-275A-4467-9217-102051BE49C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7181:*:*:*:*:*:*","matchCriteriaId":"8181AF41-779F-4289-BECE-03C2731FDA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7182:*:*:*:*:*:*","matchCriteriaId":"2BFB486E-9256-4B56-98BF-24B5A56415A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7183:*:*:*:*:*:*","matchCriteriaId":"3661D4F3-B44F-4788-8B3F-89B46835D704"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7184:*:*:*:*:*:*","matchCriteriaId":"7CCECCF0-75DA-4FA8-A90E-2B1B31F86251"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7185:*:*:*:*:*:*","matchCriteriaId":"BFEC6A92-A2B9-40D3-944C-3DB9530C17BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7186:*:*:*:*:*:*","matchCriteriaId":"F1297728-D42D-48CF-8CC8-AAEB68A877EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7188:*:*:*:*:*:*","matchCriteriaId":"3A3937FD-E0E4-4024-957A-3FC9E3C03FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*","matchCriteriaId":"D47DA377-0AF4-453E-9605-A5F87FA14E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:*","matchCriteriaId":"BC919233-CE66-416C-8649-B94A23F131F5"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-24409.html","source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-10020","sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","published":"2025-10-21T13:15:35.487","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component."},{"lang":"es","value":"La versión de Zohocorp ManageEngine ADManager Plus anterior a la 8024 es vulnerable a una vulnerabilidad de inyección de comandos autenticada en el componente de Script Personalizado."}],"affected":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","affectedData":[{"vendor":"Zohocorp","product":"ManageEngine ADManager Plus","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"8024","versionType":"8024","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-22T03:55:17.266855Z","id":"CVE-2025-10020","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"8.0","matchCriteriaId":"35D63C02-129E-43A5-AB58-E2246679811B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8001:*:*:*:*:*:*","matchCriteriaId":"EA01C510-9E1D-4F00-9D65-6305A69E533E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8002:*:*:*:*:*:*","matchCriteriaId":"629EAF0E-6444-4E3A-AE0B-A00382ED951D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8010:*:*:*:*:*:*","matchCriteriaId":"48B2B35E-9D79-4515-B0F9-260D71D45756"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8011:*:*:*:*:*:*","matchCriteriaId":"3EE35042-E248-41D7-AD60-123EB1C459FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8012:*:*:*:*:*:*","matchCriteriaId":"519D71D4-1905-4FDA-9F46-F3152B84D633"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8020:*:*:*:*:*:*","matchCriteriaId":"4DE86032-9A43-45C3-8FEC-5C069C7AE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8021:*:*:*:*:*:*","matchCriteriaId":"7276041D-D6A3-4164-849C-855765D5FF10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8022:*:*:*:*:*:*","matchCriteriaId":"009F7D2E-D2DF-4B54-B48B-CF720E41153C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8023:*:*:*:*:*:*","matchCriteriaId":"FAE8DD6F-8717-4306-AA3B-280B1056C840"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-10020.html","source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-11670","sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","published":"2025-12-15T11:15:38.607","lastModified":"2026-10-07T19:10:00.160","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. \nThis vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled."},{"lang":"es","value":"Las versiones de Zohocorp ManageEngine ADManager Plus anteriores a la 8025 son vulnerables a la Exposición de Hash NTLM.\nEsta vulnerabilidad es explotable solo por técnicos que tienen la opción 'Suplantar como administrador' habilitada."}],"affected":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","affectedData":[{"vendor":"Zohocorp","product":"ManageEngine ADManager Plus","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"8025","versionType":"8025","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-15T13:11:02.867665Z","id":"CVE-2025-11670","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"8.0","matchCriteriaId":"35D63C02-129E-43A5-AB58-E2246679811B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8000:*:*:*:*:*:*","matchCriteriaId":"4C4EF8A9-A448-48F7-9FEC-33580DE461C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8001:*:*:*:*:*:*","matchCriteriaId":"EA01C510-9E1D-4F00-9D65-6305A69E533E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8002:*:*:*:*:*:*","matchCriteriaId":"629EAF0E-6444-4E3A-AE0B-A00382ED951D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8010:*:*:*:*:*:*","matchCriteriaId":"48B2B35E-9D79-4515-B0F9-260D71D45756"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8011:*:*:*:*:*:*","matchCriteriaId":"3EE35042-E248-41D7-AD60-123EB1C459FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8012:*:*:*:*:*:*","matchCriteriaId":"519D71D4-1905-4FDA-9F46-F3152B84D633"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8020:*:*:*:*:*:*","matchCriteriaId":"4DE86032-9A43-45C3-8FEC-5C069C7AE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8021:*:*:*:*:*:*","matchCriteriaId":"7276041D-D6A3-4164-849C-855765D5FF10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8022:*:*:*:*:*:*","matchCriteriaId":"009F7D2E-D2DF-4B54-B48B-CF720E41153C"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-11670.html","source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-9435","sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","published":"2026-01-13T14:16:37.907","lastModified":"2026-06-17T10:08:58.337","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module"},{"lang":"es","value":"Las versiones de Zohocorp ManageEngine ADManager Plus inferiores a 7230 son vulnerables a salto de ruta en el módulo de Gestión de Usuarios"}],"affected":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","affectedData":[{"vendor":"Zohocorp","product":"ManageEngine ADManager Plus","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"0","lessThan":"7230","versionType":"7230","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-13T14:00:17.705894Z","id":"CVE-2025-9435","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2","matchCriteriaId":"7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*","matchCriteriaId":"1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*","matchCriteriaId":"72C14C6D-5C72-4A39-A8FF-93CD89C831C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*","matchCriteriaId":"D47DA377-0AF4-453E-9605-A5F87FA14E61"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:*","matchCriteriaId":"BC919233-CE66-416C-8649-B94A23F131F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7210:*:*:*:*:*:*","matchCriteriaId":"AD2880B4-88AD-49E4-B423-5C0CCCF5DF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7211:*:*:*:*:*:*","matchCriteriaId":"C8BCAFB6-F46D-4E09-8827-13ED1A7D5740"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7212:*:*:*:*:*:*","matchCriteriaId":"0D0166A3-B34B-44FC-9DB8-E06BDDAC7CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7220:*:*:*:*:*:*","matchCriteriaId":"CE25B1E5-D380-490C-98A6-121FA10A3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7221:*:*:*:*:*:*","matchCriteriaId":"50283EE9-A9EC-4BD2-958E-F2A278B84C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7222:*:*:*:*:*:*","matchCriteriaId":"645C5636-1E03-47D2-834B-3DE95B347E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7223:*:*:*:*:*:*","matchCriteriaId":"4340408B-3928-430F-BDBA-10E43F25C595"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7224:*:*:*:*:*:*","matchCriteriaId":"C792F787-B6F6-4908-923C-25679BA67988"}]}]}],"references":[{"url":"https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-9435.html","source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Patch","Vendor Advisory"]}]}}]}