Zohocorp ManageEngine Remote Access Plus vulnerabilities

14 CVEs affecting Zohocorp ManageEngine Remote Access Plus, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-6105, published 2023-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability, published 2023-01-18. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-01-23. EPSS: 99.8% chance of exploitation in the next 30 days. Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because…
CVE-2020-15589, published 2020-10-02. High severity, CVSS 8.1. EPSS: 8.3% chance of exploitation in the next 30 days. A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access…
CVE-2021-41828, published 2021-09-30. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml.
CVE-2021-41827, published 2021-09-30. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive.
CVE-2021-41829, published 2021-09-30. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.
CVE-2019-11361, published 2020-03-19. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escalation and eventually a full application takeover.
CVE-2022-26777, published 2022-04-16. Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.
CVE-2022-26653, published 2022-04-16. Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator).
CVE-2019-16268, published 2021-02-03. Medium severity, CVSS 4.8. EPSS: 1.8% chance of exploitation in the next 30 days. Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen.
CVE-2019-20474, published 2020-02-17. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role…

Latest

CVE-2023-6105, published 2023-11-15. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected…
CVE-2021-42955, published 2021-11-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any…
CVE-2021-42954, published 2021-11-17. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing…