Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_patch_connect_plus:9.0.0:build90063:*:*:*:*:*:*

part: a version: 9.0.0 update: build90063

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Patch Connect Plus (6431e9e4-e024-5cc5-ab26-8eb8639c81c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6105 vulnerable 2026-06-03 14:53:50.476238 ManageEngine Information Disclosure in Multiple Products
MEDIUM (5.5)
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
Published: 2023-11-15T20:57:47.981Z
Updated: 2025-02-13T17:26:03.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41833 vulnerable 2026-06-03 14:45:26.289467 Details available
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.
Published: 2021-11-11T04:30:52.000Z
Updated: 2024-08-04T03:22:24.899Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.