Manageengine Patch Connect Plus (Zohocorp) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 69 known versions, newest CVE from 2023-11-15. Vendor: Zohocorp.

CVEs of Manageengine Patch Connect Plus

• CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
• CVE-2021-41833 - CVSS 9.8 (critical), 2021-11-11: Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.
• CVE-2019-12133 - CVSS 7.8 (high), 2019-06-18: Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its…