MA
Product
ManageEngine Analytics Plus
On CISA KEVExploited in the wildRansomware-linked
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add ManageEngine Analytics Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47966 RansomwareIn wildKEV | 9.8 | Jan 18 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 5.1; 5.1; 5.1; 5.1; 5.1; 5.1; +1 more |
| CVE-2025-8324 | 9.8 | Nov 11 | SQL Injection Affected: before 6171 |
| CVE-2020-21642 | 9.8 | Aug 15 | Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code Affected: 2.9; 2.9; 2.9; 2.9; 2.9; 2.9; +34 more |
| CVE-2025-9428 | 8.8 | Oct 21 | SQL Injection Affected: before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +4 more |
| CVE-2024-52323 | 8.1 | Nov 27 | Sensitive Data Exposure Affected: before 6.1 |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 1.0 |
| CVE-2020-21641 | 7.5 | Aug 15 | Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and… Affected: before 4.3.5 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 5.3 |
Showing 8