Manageengine Key Manager Plus (Zohocorp) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2023-01-18. Vendor: Zohocorp.

CVEs of Manageengine Key Manager Plus

• CVE-2022-47966 - CVSS 9.8 (critical), 2023-01-18: Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka…
• CVE-2022-24447 - CVSS 6.5 (medium), 2022-03-02: An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to…
• CVE-2022-24446 - CVSS 4.3 (medium), 2022-03-01: An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if…
• CVE-2021-28382 - CVSS 5.4 (medium), 2021-06-07: Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
• CVE-2019-12133 - CVSS 7.8 (high), 2019-06-18: Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its…