Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Critical ManageEngine RCE flaw is being exploited (CVE-2022-35405)

Help Net Securityby @zeljkazorz ()2 min read2
Analyze CVE-2022-35405 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-35405
Deserialization RCE in ManageEngine Password Manager Pro, PAM360, and Access Manager Plus
9.8100%KEVPoC
KEV

From the original article

2 min read at helpnetsecurity.com

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2022-35405, a critical remote code execution vulnerability in ManageEngine PAM360, Password Manager Pro, and Access Manager Plus, to its Known Exploited Vulnerabilities (KEV) Catalog .

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.