Known vulnerabilities in Zoho ManageEngine EventLog Analyzer

Known vulnerabilities in Zoho ManageEngine EventLog Analyzer

Vendor: Zoho Corporation

Software: Zoho ManageEngine EventLog Analyzer

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*

Website: https://www.zohocorp.com/index.html

Total vulnerabilities: 15

Public exploits: 3

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77579 - Security Features CVE-2023-35785	CWE-254	Medium	No	No	12302	21.06.2023	SB2023062103 SB2023062104 SB2023062105 and 4 more
#VU69396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Low	No	No	12251	16.11.2022	SB2022111662
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	12215	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	12214	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	12213	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	12212	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU58459 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	CWE-78	High	No	No	12211	30.11.2021	SB2021113011
#VU56473 - Improper Authentication	CWE-287	High	No	No	12201	13.09.2021	SB2021091316
#VU48441 - Improper Control of Generation of Code ('Code Injection')	CWE-94	High	No	No	12147	16.11.2020	SB2020111611
#VU27965 - Improper Authentication	CWE-287	Low	No	No	12136	18.05.2020	SB2020051808 SB2020051809
#VU27571 - Improper input validation	CWE-20	High	No	No	12135	06.05.2020	SB2020050614
#VU25643 - Improper Access Control CVE-2019-19774	CWE-284	Low	Available	No	12110	27.02.2020	SB2019121316
#VU13888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-10076	CWE-79	Low	No	No	-	16.07.2018	SB2018071609
#VU13887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-10075	CWE-79	Low	No	No	-	16.07.2018	SB2018071609
#VU11204 - Improper input validation	CWE-20	High	No	No	-	22.03.2018	SB2018032202