8.1

CVE-2023-35785

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Ad360 Version < 4.3
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4300
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4302
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4303
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4304
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4305
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4306
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4308
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4309
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4310
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4312
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4313
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4314
Zohocorp ≫ Manageengine Ad360 Version 4.3 Update 4315
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7200
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7201
Zohocorp ≫ Manageengine Adaudit Plus Version 7.2 Update 7202
Zohocorp ≫ Manageengine Admanager Plus Version 7.2 Update 7201
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update -
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6900
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6901
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6902
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6903
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6904
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6905
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6906
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6907
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6908
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6909
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6950
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6951
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6952
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6953
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6954
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6955
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6956
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6957
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6970
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6971
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6972
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6973
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6974
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6975
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6976
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6977
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6978
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6979
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6980
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6981
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6982
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6983
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6984
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6985
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6986
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6987
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6988
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6989
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6990
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6991
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6992
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6993
Zohocorp ≫ Manageengine Assetexplorer Version 7.0 Update 7000
Zohocorp ≫ Manageengine Assetexplorer Version 7.0 Update 7001
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4100
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4101
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4102
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4103
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4104
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4105
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4106
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4107
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4108
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4109
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4110
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4111
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4112
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4113
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4115
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4116
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4117
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4118
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4119
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4120
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4121
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4122
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4130
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4131
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4140
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4141
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4150
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4160
Zohocorp ≫ Manageengine Cloud Security Plus Version 4.1 Update 4161
Zohocorp ≫ Manageengine Datasecurity Plus Version 6.1 Update 6100
Zohocorp ≫ Manageengine Datasecurity Plus Version 6.1 Update 6101
Zohocorp ≫ Manageengine Datasecurity Plus Version 6.1 Update 6110
Zohocorp ≫ Manageengine Eventlog Analyzer Version 12.3.0 Update 12300
Zohocorp ≫ Manageengine Eventlog Analyzer Version 12.3.0 Update 12301
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5700
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5701
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5702
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5703
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5704
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5705
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5706
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5707
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5708
Zohocorp ≫ Manageengine Exchange Reporter Plus Version 5.7 Update 5709
Zohocorp ≫ Manageengine Log360 Version < 5.3
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5300
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5301
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5302
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5305
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5310
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5311
Zohocorp ≫ Manageengine Log360 Version 5.3 Update build5315
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4010
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4011
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4015
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4016
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4020
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4021
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4023
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4024
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4025
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4026
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4027
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4028
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4030
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4031
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4034
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4035
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4036
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4040
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4043
Zohocorp ≫ Manageengine Log360 Ueba Version 4.0 Update build4045
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4500
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4502
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4503
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4504
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4505
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4507
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4508
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4509
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4510
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4511
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4512
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4513
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4514
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4516
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4517
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4518
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4519
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4520
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4523
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4525
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4527
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4528
Zohocorp ≫ Manageengine M365 Manager Plus Version 4.5 Update build4529
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4500
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4502
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4503
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4504
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4505
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4507
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4508
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4509
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4510
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4511
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4512
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4513
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4514
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4516
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4517
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4518
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4519
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4520
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4523
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4525
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4527
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4528
Zohocorp ≫ Manageengine M365 Security Plus Version 4.5 Update 4529
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6001
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6003
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6005
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6011
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6016
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6017
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6020
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6025
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6026
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6030
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6031
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6032
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6041
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6042
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6043
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6044
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6047
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6049
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6050
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6051
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6053
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6054
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6056
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6057
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6058
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6060
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6061
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.2 Update 14200
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.2 Update 14201
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.2 Update 14202
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.2 Update 14203
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.2 Update 14204
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.3 Update 14300
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.3 Update 14301
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.3 Update 14302
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 14.3 Update 14300
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4400
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4401
Zohocorp ≫ Manageengine Sharepoint Manager Plus Version 4.4 Update 4402
Zohocorp ≫ Manageengine Supportcenter Plus Version 14.3 Update 14300
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.43% 0.821
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://manageengine.com
Product
https://www.manageengine.com/security/advisory/CVE/CVE-2023-35785.html
Patch
Vendor Advisory