{"schema_version":"1","data":[{"id":3754,"advisory_id":"e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10189","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:40:23.439099+00:00","extraction_method":"structured","technologies":["core-kev","manageengine"],"cve_ids":["CVE-2020-10189"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Desktop Central File Upload Vulnerability","summary":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-10189","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-10189","aliases":["CVE-2020-10189"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-10189","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10189","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.","vulnerabilityName":"Zoho ManageEngine Desktop Central File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-10189","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3753,"advisory_id":"28c2a209-542f-4840-b8b6-9ef2afae1baa","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8394","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:40:22.858567+00:00","extraction_method":"structured","technologies":["core-kev","manageengine"],"cve_ids":["CVE-2019-8394"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","summary":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-8394","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-8394","aliases":["CVE-2019-8394"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-434"],"cveID":"CVE-2019-8394","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8394","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-8394","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3751,"advisory_id":"0b43c5c4-b556-4382-96f1-ac938506ba15","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40539","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:40:21.210776+00:00","extraction_method":"structured","technologies":["core-kev","manageengine"],"cve_ids":["CVE-2021-40539"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40539","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40539","aliases":["CVE-2021-40539"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-55"],"cveID":"CVE-2021-40539","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40539","dueDate":"2021-11-17","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-40539","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1425,"advisory_id":"4c5c95f3-7723-4b9c-be11-da1e13e40c24","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405","source_published_at":"2022-09-22T00:00:00+00:00","published_at":"2026-10-24T21:02:23.954461+00:00","extraction_method":"structured","technologies":["core-kev","manageengine"],"cve_ids":["CVE-2022-35405"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-35405","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-35405","aliases":["CVE-2022-35405"],"affected":[],"modified":"2022-09-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-35405","notes":"https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-35405","dueDate":"2022-10-13","product":"ManageEngine","dateAdded":"2022-09-22","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-35405","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1388,"advisory_id":"a0d849ee-122c-438d-88c5-cd333b0b9823","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-47966","source_published_at":"2023-01-23T00:00:00+00:00","published_at":"2026-10-24T21:01:57.7344+00:00","extraction_method":"structured","technologies":["core-kev","manageengine"],"cve_ids":["CVE-2022-47966"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-47966","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-47966","aliases":["CVE-2022-47966"],"affected":[],"modified":"2023-01-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-47966","notes":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-47966","dueDate":"2023-02-13","product":"ManageEngine","dateAdded":"2023-01-23","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-47966","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1368,"advisory_id":"92933ef9-ca83-461e-8f81-22c41595fe8c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-28810","source_published_at":"2023-03-07T00:00:00+00:00","published_at":"2026-10-24T21:01:45.001994+00:00","extraction_method":"structured","technologies":["core-kev","manageengine"],"cve_ids":["CVE-2022-28810"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-28810","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-28810","aliases":["CVE-2022-28810"],"affected":[],"modified":"2023-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-78","CWE-259"],"cveID":"CVE-2022-28810","notes":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-28810","dueDate":"2023-03-28","product":"ManageEngine","dateAdded":"2023-03-07","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-28810","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3754,"next_before":1368}