CVE-2022-47966 · Sandworm Watch

Jan 23, 2023high

CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. Required action: Apply updates per vendor instructions.

CVE-2022-47966EPSS 99.8%ManageEngineZoho

CISA KEV ↗ · unattributed attribution