CVE-2022-47966 Zoho ManageEngine
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
- CVSS
- not scored
On CISA’s exploited list
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- Added
- 2023-01-23
- Federal patch deadline
- 2023-02-13
- Ransomware use
- known