Apply updates per vendor instructions.
Evidence dossier
CVE-2022-47966
CVE-2022-47966
84.5–99.5Priority evidence range
gen-56ccdaf9Normalized restatement
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).
- State
- PUBLISHED
- Published
- Jan 18, 2023
- Updated
- Oct 21, 2025
- Evidence coverage
- 85%
2026-07-18 · v2026.06.15 · percentile 100.0%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
mitreoriginal assertion
container
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).
Jul 19, 2026Original evidence ↗
CISA KEVoriginal assertion
observed_exploitation
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Jul 19, 2026Original evidence ↗
FIRST EPSSoriginal assertion
model_probability
Probability 0.997530000000; percentile 0.999540000000
Jul 19, 2026Original evidence ↗
Applicability
Cited product scope
n/an/a
[{"status": "affected", "version": "n/a"}]unknownUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:*:*:*:*:*:*:*:*; end excluding 4.3supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4300:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4301:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4302:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4303:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4304:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4305:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4306:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4307:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:*:*:*:*:*:*:*:*; end excluding 4.3supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4300:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4302:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4303:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4304:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4305:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4306:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4308:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4309:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*; end excluding 7.0supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*; end excluding 7.1supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*; end excluding 6.2supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6200:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6201:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6202:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6203:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6204:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6205:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6206:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6207:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6208:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6209:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6210:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:*:*:*:*:*:*:*:*; end excluding 5.1supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5100:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5110:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5120:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5121:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5130:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5140:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_application_control_plus:*:*:*:*:*:*:*:*; end excluding 10.1.2220.18supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*; end excluding 6.9supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_browser_security_plus:*:*:*:*:*:*:*:*; end excluding 11.1.2238.6supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_device_control_plus:*:*:*:*:*:*:*:*; end excluding 10.1.2220.18supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_endpoint_dlp_plus:*:*:*:*:*:*:*:*; end excluding 10.1.2137.6supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_key_manager_plus:*:*:*:*:*:*:*:*; end excluding 6.4supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_key_manager_plus:6.4:6400:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_os_deployer:*:*:*:*:*:*:*:*; end excluding 1.1.2243.1supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*; end excluding 5.7supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5700:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5710:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5711:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5712:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*; end excluding 12.1supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12100:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12101:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12110:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12120:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12121:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12122:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12123:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_patch_manager_plus:*:*:*:*:*:*:*:*; end excluding 10.1.2220.18supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_remote_access_plus:*:*:*:*:*:*:*:*; end excluding 10.1.2228.11supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_remote_monitoring_and_management_central:*:*:*:*:*:*:*:*; end excluding 10.1.41supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*; end excluding 14.0supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*; end excluding 13.0supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11020:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11021:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11022:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11024:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11025:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:zohocorp:manageengine_vulnerability_manager_plus:*:*:*:*:*:*:*:*; end excluding 10.1.2220.18supportedAssessments
CVSS by origin
nvd@nist.govCVSS 3.1 · role Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADPCVSS 3.1 · role unknown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.