Known vulnerabilities in ManageEngine Access Manager Plus 4.3 4307

Vendor: ManageEngine
Software: ManageEngine Access Manager Plus
Version: 4.3 4307
Software CPE: cpe:2.3:a:manageengine:manageengine_access_manager_plus:*:*:*:*:*:*:*:*
Website: https://www.manageengine.com/
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ManageEngine Access Manager Plus version 4.3 4307 ManageEngine Access Manager Plus 4.3 4307 is affected by 3 vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75500 - Use of Hard-coded Credentials
CVE-2023-2291		 CWE-798 Low
No
No
 - 26.04.2023 SB2023042601
#VU71210 - Improper input validation
CVE-2022-47966		 CWE-20 High
Public exploit available
Exploited
 4.3 4308 17.01.2023 SB2023011717
SB2023011718
#VU70548 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-47523		 CWE-89 Medium
No
No
 4.3 4309 01.01.2023 SB2023010102
SB2023010703
SB2023011720
and 1 more