Known vulnerabilities in Zoho ManageEngine EventLog Analyzer 12204

Vendor: Zoho Corporation

Version: 12204

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*

Website: https://www.zohocorp.com/index.html

Total vulnerabilities: 7

Public exploits: 2

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77579 - Security Features CVE-2023-35785	CWE-254	Medium	No	No	12302	21.06.2023	SB2023062103 SB2023062104 SB2023062105 and 4 more
#VU69396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Low	No	No	12251	16.11.2022	SB2022111662
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	12215	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Public exploit available	No	12214	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Public exploit available	Exploited	12213	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Public exploit available	Exploited	12212	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU58459 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	CWE-78	High	No	No	12211	30.11.2021	SB2021113011