{"schema_version":"2","view":"grouped","data":[{"id":3739,"cve_ids":["CVE-2020-10189"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Desktop Central File Upload Vulnerability","summary":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-10189","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-10189","aliases":["CVE-2020-10189"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-10189","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10189","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.","vulnerabilityName":"Zoho ManageEngine Desktop Central File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-10189","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10189","advisory_id":"e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","event_types":["advisory"],"published_at":"2026-10-24T21:40:23.439099+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Ae78ea6dc-fa9b-4436-aa66-9c51902ee4b7","group":{"id":"advisory:e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","revision":1,"primary_event_id":3754,"change":"published","superseded_by":[],"changed":{"id":3754,"cve_ids":["CVE-2020-10189"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Desktop Central File Upload Vulnerability","summary":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-10189","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-10189","aliases":["CVE-2020-10189"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-10189","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10189","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.","vulnerabilityName":"Zoho ManageEngine Desktop Central File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-10189","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10189","advisory_id":"e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","event_types":["advisory"],"published_at":"2026-10-24T21:40:23.439099+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3754"},"members":[{"id":3754,"cve_ids":["CVE-2020-10189"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Desktop Central File Upload Vulnerability","summary":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-10189","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-10189","aliases":["CVE-2020-10189"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-10189","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10189","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution.","vulnerabilityName":"Zoho ManageEngine Desktop Central File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-10189","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-10189","advisory_id":"e78ea6dc-fa9b-4436-aa66-9c51902ee4b7","event_types":["advisory"],"published_at":"2026-10-24T21:40:23.439099+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3754"}]}},{"id":3738,"cve_ids":["CVE-2019-8394"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","summary":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-8394","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-8394","aliases":["CVE-2019-8394"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-434"],"cveID":"CVE-2019-8394","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8394","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-8394","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:28c2a209-542f-4840-b8b6-9ef2afae1baa","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8394","advisory_id":"28c2a209-542f-4840-b8b6-9ef2afae1baa","event_types":["advisory"],"published_at":"2026-10-24T21:40:22.858567+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A28c2a209-542f-4840-b8b6-9ef2afae1baa","group":{"id":"advisory:28c2a209-542f-4840-b8b6-9ef2afae1baa","revision":1,"primary_event_id":3753,"change":"published","superseded_by":[],"changed":{"id":3753,"cve_ids":["CVE-2019-8394"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","summary":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-8394","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-8394","aliases":["CVE-2019-8394"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-434"],"cveID":"CVE-2019-8394","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8394","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-8394","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:28c2a209-542f-4840-b8b6-9ef2afae1baa","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8394","advisory_id":"28c2a209-542f-4840-b8b6-9ef2afae1baa","event_types":["advisory"],"published_at":"2026-10-24T21:40:22.858567+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3753"},"members":[{"id":3753,"cve_ids":["CVE-2019-8394"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","summary":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-8394","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-8394","aliases":["CVE-2019-8394"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-434"],"cveID":"CVE-2019-8394","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8394","dueDate":"2022-05-03","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-8394","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:28c2a209-542f-4840-b8b6-9ef2afae1baa","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-8394","advisory_id":"28c2a209-542f-4840-b8b6-9ef2afae1baa","event_types":["advisory"],"published_at":"2026-10-24T21:40:22.858567+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3753"}]}},{"id":3736,"cve_ids":["CVE-2021-40539"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40539","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40539","aliases":["CVE-2021-40539"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-55"],"cveID":"CVE-2021-40539","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40539","dueDate":"2021-11-17","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-40539","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b43c5c4-b556-4382-96f1-ac938506ba15","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40539","advisory_id":"0b43c5c4-b556-4382-96f1-ac938506ba15","event_types":["advisory"],"published_at":"2026-10-24T21:40:21.210776+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A0b43c5c4-b556-4382-96f1-ac938506ba15","group":{"id":"advisory:0b43c5c4-b556-4382-96f1-ac938506ba15","revision":1,"primary_event_id":3751,"change":"published","superseded_by":[],"changed":{"id":3751,"cve_ids":["CVE-2021-40539"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40539","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40539","aliases":["CVE-2021-40539"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-55"],"cveID":"CVE-2021-40539","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40539","dueDate":"2021-11-17","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-40539","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b43c5c4-b556-4382-96f1-ac938506ba15","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40539","advisory_id":"0b43c5c4-b556-4382-96f1-ac938506ba15","event_types":["advisory"],"published_at":"2026-10-24T21:40:21.210776+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3751"},"members":[{"id":3751,"cve_ids":["CVE-2021-40539"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40539","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40539","aliases":["CVE-2021-40539"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-55"],"cveID":"CVE-2021-40539","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40539","dueDate":"2021-11-17","product":"ManageEngine","dateAdded":"2021-11-03","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-40539","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0b43c5c4-b556-4382-96f1-ac938506ba15","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40539","advisory_id":"0b43c5c4-b556-4382-96f1-ac938506ba15","event_types":["advisory"],"published_at":"2026-10-24T21:40:21.210776+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3751"}]}},{"id":1438,"cve_ids":["CVE-2022-35405"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-35405","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-35405","aliases":["CVE-2022-35405"],"affected":[],"modified":"2022-09-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-35405","notes":"https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-35405","dueDate":"2022-10-13","product":"ManageEngine","dateAdded":"2022-09-22","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-35405","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c5c95f3-7723-4b9c-be11-da1e13e40c24","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405","advisory_id":"4c5c95f3-7723-4b9c-be11-da1e13e40c24","event_types":["advisory"],"published_at":"2026-10-24T21:02:23.954461+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-22T00:00:00+00:00","detail_url":"/advisories/advisory%3A4c5c95f3-7723-4b9c-be11-da1e13e40c24","group":{"id":"advisory:4c5c95f3-7723-4b9c-be11-da1e13e40c24","revision":1,"primary_event_id":1425,"change":"published","superseded_by":[],"changed":{"id":1425,"cve_ids":["CVE-2022-35405"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-35405","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-35405","aliases":["CVE-2022-35405"],"affected":[],"modified":"2022-09-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-35405","notes":"https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-35405","dueDate":"2022-10-13","product":"ManageEngine","dateAdded":"2022-09-22","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-35405","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c5c95f3-7723-4b9c-be11-da1e13e40c24","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405","advisory_id":"4c5c95f3-7723-4b9c-be11-da1e13e40c24","event_types":["advisory"],"published_at":"2026-10-24T21:02:23.954461+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-22T00:00:00+00:00","detail_url":"/events/1425"},"members":[{"id":1425,"cve_ids":["CVE-2022-35405"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-35405","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-35405","aliases":["CVE-2022-35405"],"affected":[],"modified":"2022-09-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-35405","notes":"https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-35405","dueDate":"2022-10-13","product":"ManageEngine","dateAdded":"2022-09-22","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-35405","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c5c95f3-7723-4b9c-be11-da1e13e40c24","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-35405","advisory_id":"4c5c95f3-7723-4b9c-be11-da1e13e40c24","event_types":["advisory"],"published_at":"2026-10-24T21:02:23.954461+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-09-22T00:00:00+00:00","detail_url":"/events/1425"}]}},{"id":1400,"cve_ids":["CVE-2022-47966"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-47966","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-47966","aliases":["CVE-2022-47966"],"affected":[],"modified":"2023-01-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-47966","notes":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-47966","dueDate":"2023-02-13","product":"ManageEngine","dateAdded":"2023-01-23","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-47966","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a0d849ee-122c-438d-88c5-cd333b0b9823","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-47966","advisory_id":"a0d849ee-122c-438d-88c5-cd333b0b9823","event_types":["advisory"],"published_at":"2026-10-24T21:01:57.7344+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-01-23T00:00:00+00:00","detail_url":"/advisories/advisory%3Aa0d849ee-122c-438d-88c5-cd333b0b9823","group":{"id":"advisory:a0d849ee-122c-438d-88c5-cd333b0b9823","revision":1,"primary_event_id":1388,"change":"published","superseded_by":[],"changed":{"id":1388,"cve_ids":["CVE-2022-47966"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-47966","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-47966","aliases":["CVE-2022-47966"],"affected":[],"modified":"2023-01-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-47966","notes":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-47966","dueDate":"2023-02-13","product":"ManageEngine","dateAdded":"2023-01-23","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-47966","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a0d849ee-122c-438d-88c5-cd333b0b9823","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-47966","advisory_id":"a0d849ee-122c-438d-88c5-cd333b0b9823","event_types":["advisory"],"published_at":"2026-10-24T21:01:57.7344+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-01-23T00:00:00+00:00","detail_url":"/events/1388"},"members":[{"id":1388,"cve_ids":["CVE-2022-47966"],"payload":{"kind":"advisory","title":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","summary":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-47966","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-47966","aliases":["CVE-2022-47966"],"affected":[],"modified":"2023-01-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-47966","notes":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-47966","dueDate":"2023-02-13","product":"ManageEngine","dateAdded":"2023-01-23","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-47966","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a0d849ee-122c-438d-88c5-cd333b0b9823","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-47966","advisory_id":"a0d849ee-122c-438d-88c5-cd333b0b9823","event_types":["advisory"],"published_at":"2026-10-24T21:01:57.7344+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-01-23T00:00:00+00:00","detail_url":"/events/1388"}]}},{"id":1380,"cve_ids":["CVE-2022-28810"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-28810","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-28810","aliases":["CVE-2022-28810"],"affected":[],"modified":"2023-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-78","CWE-259"],"cveID":"CVE-2022-28810","notes":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-28810","dueDate":"2023-03-28","product":"ManageEngine","dateAdded":"2023-03-07","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-28810","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:92933ef9-ca83-461e-8f81-22c41595fe8c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-28810","advisory_id":"92933ef9-ca83-461e-8f81-22c41595fe8c","event_types":["advisory"],"published_at":"2026-10-24T21:01:45.001994+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-03-07T00:00:00+00:00","detail_url":"/advisories/advisory%3A92933ef9-ca83-461e-8f81-22c41595fe8c","group":{"id":"advisory:92933ef9-ca83-461e-8f81-22c41595fe8c","revision":1,"primary_event_id":1368,"change":"published","superseded_by":[],"changed":{"id":1368,"cve_ids":["CVE-2022-28810"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-28810","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-28810","aliases":["CVE-2022-28810"],"affected":[],"modified":"2023-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-78","CWE-259"],"cveID":"CVE-2022-28810","notes":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-28810","dueDate":"2023-03-28","product":"ManageEngine","dateAdded":"2023-03-07","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-28810","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:92933ef9-ca83-461e-8f81-22c41595fe8c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-28810","advisory_id":"92933ef9-ca83-461e-8f81-22c41595fe8c","event_types":["advisory"],"published_at":"2026-10-24T21:01:45.001994+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-03-07T00:00:00+00:00","detail_url":"/events/1368"},"members":[{"id":1368,"cve_ids":["CVE-2022-28810"],"payload":{"kind":"advisory","title":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","summary":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-28810","products":[{"name":{"value":"ManageEngine","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-28810","aliases":["CVE-2022-28810"],"affected":[],"modified":"2023-03-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-78","CWE-259"],"cveID":"CVE-2022-28810","notes":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-28810","dueDate":"2023-03-28","product":"ManageEngine","dateAdded":"2023-03-07","vendorProject":"Zoho","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-28810","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:92933ef9-ca83-461e-8f81-22c41595fe8c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-28810","advisory_id":"92933ef9-ca83-461e-8f81-22c41595fe8c","event_types":["advisory"],"published_at":"2026-10-24T21:01:45.001994+00:00","technologies":["core-kev","manageengine"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-03-07T00:00:00+00:00","detail_url":"/events/1368"}]}}],"next_after":3739,"next_before":1380}