Known vulnerabilities in ManageEngine Access Manager Plus

Vendor: ManageEngine
Software: ManageEngine Access Manager Plus
Software CPE: cpe:2.3:a:manageengine:manageengine_access_manager_plus:*:*:*:*:*:*:*:*
Website: https://www.manageengine.com/
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ManageEngine Access Manager Plus ManageEngine Access Manager Plus is affected by 4 known vulnerabilities: 2 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75500 - Use of Hard-coded Credentials
CVE-2023-2291		 CWE-798 Low
No
No
 - 26.04.2023 -
#VU71210 - Improper input validation
CVE-2022-47966		 CWE-20 High
Available
Exploited
 4.3 4308 17.01.2023 SB2023011717
SB2023011718
#VU70548 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-47523		 CWE-89 Medium
No
No
 4.3 4309 01.01.2023 SB2023010102
SB2023010703
SB2023011720
and 1 more
#VU62664 - Improper Access Control
CVE-2022-29081		 CWE-284 High
No
No
 4.3 4302 27.04.2022 SB2022042735