MA
Product
Manageengine Assetexplorer
On CISA KEVExploited in the wildRansomware-linked
26
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 12Low 0
Watch
Add Manageengine Assetexplorer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47966 RansomwareIn wildKEV | 9.8 | Jan 18 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +26 more |
| CVE-2021-20110 | 9.8 | Jul 19 | Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset… Affected: 1.0.34 |
| CVE-2019-12994 | 9.1 | Aug 8 | Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL Affected: 6.2.0 |
Showing 3
