Zoho: exploited vulnerabilities
- 9exploited vulnerabilities
- 2used by ransomware
- Mar 7, 2023latest one added
- ManageEngine 6
- Desktop Central 1
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus 1
- ManageEngine ServiceDesk Plus (SDP) 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 7, 2023 | ADSelfService Plus Remote Code Execution | ManageEngine | Medium 6.8 | 71% |
| Jan 23, 2023 | Multiple Products Remote Code Execution | ManageEngine | Critical 9.8 | 99.8% |
| Sep 22, 2022 | Multiple Products Remote Code Execution | ManageEngine | Critical 9.8 | 99.9% |
| Dec 10, 2021 | Authentication Bypass | Desktop Central | Critical 9.8 | 99.9% |
| Dec 1, 2021 | ManageEngine ServiceDesk Plus Remote Code Execution | ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Critical 9.8 | 93% |
| Dec 1, 2021 | ManageEngine ServiceDesk Authentication Bypass | ManageEngine ServiceDesk Plus (SDP) | Critical 9.8 | 99.8% |
| Nov 3, 2021 | ADSelfService Plus Authentication Bypass | ManageEngine | Critical 9.8 | 99% |
| Nov 3, 2021 | Desktop Central File Upload | ManageEngine | Critical 9.8 | 99.9% |
| Nov 3, 2021 | ServiceDesk Plus (SDP) File Upload | ManageEngine | High 7.5 | 63% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.