7.2

CVE-2023-48646

Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6001
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6003
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6005
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6011
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6016
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6017
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6020
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6025
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6026
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6030
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6031
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6032
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6041
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6042
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6043
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6044
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6047
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6049
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6050
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6051
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6053
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6054
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6056
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6057
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6058
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6060
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6061
Zohocorp ≫ Manageengine Recoverymanager Plus Version 6.0 Update build6062
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 82.16% 0.996
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.manageengine.com/ad-recovery-manager/advisory/CVE-2023-48646.html
Vendor Advisory