MA
Product
Manageengine Analytics Plus
On CISA KEVExploited in the wildRansomware-linked
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Manageengine Analytics Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47966 RansomwareIn wildKEV | 9.8 | Jan 18 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 5.1; 5.1; 5.1; 5.1; 5.1; 5.1; +1 more |
| CVE-2020-21642 | 9.8 | Aug 15 | Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code Affected: 2.9; 2.9; 2.9; 2.9; 2.9; 2.9; +34 more |
| CVE-2025-9428 | 8.8 | Oct 21 | Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api Affected: before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +4 more |
| CVE-2024-52323 | 8.1 | Nov 27 | Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to… Affected: before 6.1 |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 1.0 |
| CVE-2020-21641 | 7.5 | Aug 15 | Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and… Affected: before 4.3.5 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 5.3 |
Showing 7