Zohocorp Manageengine Sharepoint Manager Plus — known CVE vulnerabilities

Every CVE whose affected-product data names Zohocorp Manageengine Sharepoint Manager Plus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-24305 — CVSS 9.8 (critical): Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation.
• CVE-2022-24306 — CVSS 9.8 (critical): Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
• CVE-2024-10839 — CVSS 8.5 (high): Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the…
• CVE-2023-35785 — CVSS 8.1 (high): Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer…
• CVE-2023-6105 — CVSS 5.5 (medium): An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A…