CVE-2022-35405
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
99.9%
p100
KEV
SIM
22 de set. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
99.9%EPSS · 30 dias99.9%
2026-10-082026-11-05
Produto
Zoho / ManageEngine
Vulnerabilidade
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Adicionado ao KEV
22 de set. de 2022
Corrigir até
13 de out. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.
Ação necessária
Apply updates per vendor instructions.
Notas
https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html; https://nvd.nist.gov/vuln/detail/CVE-2022-35405
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-479669.8 CRÍ100.0%
KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability98dCVE-2020-10189—100.0%
KEV—80Zoho ManageEngine Desktop Central File Upload Vulnerability—CVE-2021-40539—99.9%
KEV—80Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability—CVE-2022-28810—99.4%
KEV—80Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability—CVE-2019-8394—99.2%
KEV—80Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability—