Known vulnerabilities in ManageEngine Access Manager Plus 4.3 4308

Vendor: ManageEngine
Software: ManageEngine Access Manager Plus
Version: 4.3 4308
Software CPE: cpe:2.3:a:manageengine:manageengine_access_manager_plus:*:*:*:*:*:*:*:*
Website: https://www.manageengine.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ManageEngine Access Manager Plus version 4.3 4308 ManageEngine Access Manager Plus 4.3 4308 is affected by 2 vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75500 - Use of Hard-coded Credentials
CVE-2023-2291		 CWE-798 Low
No
No
 - 26.04.2023 SB2023042601
#VU70548 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-47523		 CWE-89 Medium
No
No
 4.3 4309 01.01.2023 SB2023010102
SB2023010703
SB2023011720
and 1 more