Known vulnerabilities in Zoho ManageEngine EventLog Analyzer 12000

Vendor: Zoho Corporation

Version: 12000

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*

Website: https://www.zohocorp.com/index.html

Total vulnerabilities: 10

Public exploits: 3

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77579 - Security Features CVE-2023-35785	CWE-254	Medium	No	No	12302	21.06.2023	SB2023062103 SB2023062104 SB2023062105 and 4 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Public exploit available	No	12214	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Public exploit available	Exploited	12213	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Public exploit available	Exploited	12212	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU58459 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	CWE-78	High	No	No	12211	30.11.2021	SB2021113011
#VU56473 - Improper Authentication	CWE-287	High	No	No	12201	13.09.2021	SB2021091316
#VU48441 - Improper Control of Generation of Code ('Code Injection')	CWE-94	High	No	No	12147	16.11.2020	SB2020111611
#VU27965 - Improper Authentication	CWE-287	Low	No	No	12136	18.05.2020	SB2020051808 SB2020051809
#VU27571 - Improper input validation	CWE-20	High	No	No	12135	06.05.2020	SB2020050614
#VU25643 - Improper Access Control CVE-2019-19774	CWE-284	Low	Public exploit available	No	12110	27.02.2020	SB2019121316