BLACKOUT MAP

Zoho: vulnerabilidades exploradas

AdicionadoVulnerabilidadeProdutoGravidadeChance de ataque
7 de mar. de 2023ADSelfService Plus Remote Code ExecutionCVE-2022-28810ManageEngineMédia 6,871%
23 de jan. de 2023Multiple Products Remote Code ExecutionCVE-2022-47966usada por ransomwareManageEngineCrítica 9,899,8%
22 de set. de 2022Multiple Products Remote Code ExecutionCVE-2022-35405ManageEngineCrítica 9,899,9%
10 de dez. de 2021Authentication BypassCVE-2021-44515Desktop CentralCrítica 9,899,9%
1 de dez. de 2021ManageEngine ServiceDesk Plus Remote Code ExecutionCVE-2021-44077ManageEngine ServiceDesk Plus (SDP) / SupportCenter PlusCrítica 9,893%
1 de dez. de 2021ManageEngine ServiceDesk Authentication BypassCVE-2021-37415ManageEngine ServiceDesk Plus (SDP)Crítica 9,899,8%
3 de nov. de 2021ADSelfService Plus Authentication BypassCVE-2021-40539usada por ransomwareManageEngineCrítica 9,899%
3 de nov. de 2021Desktop Central File UploadCVE-2020-10189ManageEngineCrítica 9,899,9%
3 de nov. de 2021ServiceDesk Plus (SDP) File UploadCVE-2019-8394ManageEngineAlto 7,563%

Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.