Improper input validation in Zohocorp Manageengine Access Manager Plus
CVSS Skor
9.8
EPSS İhtimal
%99.8
Risk Skoru
19.6
Yayın
3 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Python scanner for CVE-2022-47966. Supports ~10 of the 24 affected products.
POC for CVE-2022-47966 affecting multiple ManageEngine products
Nuclei: ManageEngine - Remote Command Execution
http://packetstormsecurity.com/files/170882/Zoho-ManageEngine-ServiceDesk-Plus-14003-Remote-Code-Execution.html
http://packetstormsecurity.com/files/170925/ManageEngine-ADSelfService-Plus-Unauthenticated-SAML-Remote-Code-Execution.html
http://packetstormsecurity.com/files/170943/Zoho-ManageEngine-Endpoint-Central-MSP-10.1.2228.10-Remote-Code-Execution.html
https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis
https://blog.viettelcybersecurity.com/saml-show-stopper/
https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/
İlgili Benzer Açıklar
SQL injection in Zohocorp Manageengine Analytics Plus
Vulnerability in Zohocorp Manageengine Adselfservice Plus
Authenticated File Write to RCE via keepalived in DDI Central
Remote code execution vulnerability
Authenticated PowerShell Injection leads to RCE
Command injection in Zohocorp Manageengine Admanager Plus
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-47966"