Zoho: vulnerabilidades explotadas
- 9vulnerabilidades explotadas
- 2usado por ransomware
- 7 mar 2023la última añadida
- ManageEngine 6
- Desktop Central 1
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus 1
- ManageEngine ServiceDesk Plus (SDP) 1
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 7 mar 2023 | ADSelfService Plus Remote Code Execution | ManageEngine | Media 6,8 | 71% |
| 23 ene 2023 | Multiple Products Remote Code Execution | ManageEngine | Crítica 9,8 | 99,8% |
| 22 sept 2022 | Multiple Products Remote Code Execution | ManageEngine | Crítica 9,8 | 99,9% |
| 10 dic 2021 | Authentication Bypass | Desktop Central | Crítica 9,8 | 99,9% |
| 1 dic 2021 | ManageEngine ServiceDesk Plus Remote Code Execution | ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Crítica 9,8 | 93% |
| 1 dic 2021 | ManageEngine ServiceDesk Authentication Bypass | ManageEngine ServiceDesk Plus (SDP) | Crítica 9,8 | 99,8% |
| 3 nov 2021 | ADSelfService Plus Authentication Bypass | ManageEngine | Crítica 9,8 | 99% |
| 3 nov 2021 | Desktop Central File Upload | ManageEngine | Crítica 9,8 | 99,9% |
| 3 nov 2021 | ServiceDesk Plus (SDP) File Upload | ManageEngine | Alto 7,5 | 63% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.