CVE-2022-47966
Severity not reported CISA KEVData quality: kev only.
This record comes from the CISA KEV catalog only; NVD details have not been synced yet.
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Vendor / product: Zoho — ManageEngine
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
CVSS
—
Not reported by the source
Timeline (UTC)
Published: not reported
Modified: not reported
NVD status: not reported
Last synced 1 day ago
Verified against the source API 2026-10-27 06:50 UTC
Exploitation
Listed in CISA KEV
Added 2023-01-23 · due 2023-02-13
Known ransomware use: Known
Required action (CISA)
Apply updates per vendor instructions.
Affected products
Not reported by the source (unknown — not "none").
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- No references reported.
Data sources
CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗