Known vulnerabilities in ManageEngine Access Manager Plus 4.2 4202

Vendor: ManageEngine
Software: ManageEngine Access Manager Plus
Version: 4.2 4202
Software CPE: cpe:2.3:a:manageengine:manageengine_access_manager_plus:*:*:*:*:*:*:*:*
Website: https://www.manageengine.com/
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ManageEngine Access Manager Plus version 4.2 4202 ManageEngine Access Manager Plus 4.2 4202 is affected by 2 vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71210 - Improper input validation
CVE-2022-47966		 CWE-20 High
Public exploit available
Exploited
 4.3 4308 17.01.2023 SB2023011717
SB2023011718
#VU62664 - Improper Access Control
CVE-2022-29081		 CWE-284 High
No
No
 4.3 4302 27.04.2022 SB2022042735