CVE-2022-23050: Zohocorp ManageEngine Applications Manager

High severity, CVSS 7.2. EPSS: 4.9% chance of exploitation in the next 30 days.

ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the 'working' folder through the 'Upload Files / Binaries' functionality.

Affected products

• Zohocorp ManageEngine Applications Manager: from 15.0, before 15.5 (fixed in 15.5); version 15.5 only

Published 2022-05-24. Last modified 2026-06-17.