VulnerabilityhighExploited in the wild

Hackers exploiting vulnerability affecting Zoho ManageEngine products: Rapid7

The RecordFeb 3, 2023 · 00:00 UTC (Feb 3, 2023)2 min read2 · 1 read

Read at therecord.media

Analyze CVE-2022-47966 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-47966 CVE-2021-40539

Tags: cve-2022-47966 cve-2021-40539 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2022-47966	Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products	9.8	100%	KEVRansomwarePoC ×6	Jan 18, 2023 KEV Jan 23, 2023

From the original article

2 min read at therecord.media

Researchers at cybersecurity firm Rapid7 have observed exploitation of a vulnerability affecting two dozen ManageEngine products from software company Zoho. The bug – CVE-2022-47966 – was patched in waves starting on October 27, with the last product receiving a patch on November 7.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.