CVE-2022-47966—Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2023-01-23 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-47966
Project:
Zoho
Product:
ManageEngine
Date Added:
2023-01-23
Due Date:
2023-02-13
Last Updated:
June 21, 2025

Vulnerability Name

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Description

Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html
  • https://nvd.nist.gov/vuln/detail/CVE-2022-47966

Related News Articles

browse all CVEs