CVE-2023-48646

zohocorp manageengine recoverymanager plus

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-48646

Katalog CVE

CVSS 7.2 · High EPSS 82,2%

Kerentanan pada zohocorp manageengine recoverymanager plus. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings.

Rincian

Terbit di NVD
22 November 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari)
82,2% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine recoverymanager plus Semua versi sebelum 6.0
zohocorp manageengine recoverymanager plus Versi 6.0 build6001
zohocorp manageengine recoverymanager plus Versi 6.0 build6003
zohocorp manageengine recoverymanager plus Versi 6.0 build6005
zohocorp manageengine recoverymanager plus Versi 6.0 build6011
zohocorp manageengine recoverymanager plus Versi 6.0 build6016
zohocorp manageengine recoverymanager plus Versi 6.0 build6017
zohocorp manageengine recoverymanager plus Versi 6.0 build6020
zohocorp manageengine recoverymanager plus Versi 6.0 build6025
zohocorp manageengine recoverymanager plus Versi 6.0 build6026
zohocorp manageengine recoverymanager plus Versi 6.0 build6030
zohocorp manageengine recoverymanager plus Versi 6.0 build6031
zohocorp manageengine recoverymanager plus Versi 6.0 build6032
zohocorp manageengine recoverymanager plus Versi 6.0 build6041
zohocorp manageengine recoverymanager plus Versi 6.0 build6042
zohocorp manageengine recoverymanager plus Versi 6.0 build6043
zohocorp manageengine recoverymanager plus Versi 6.0 build6044
zohocorp manageengine recoverymanager plus Versi 6.0 build6047
zohocorp manageengine recoverymanager plus Versi 6.0 build6049
zohocorp manageengine recoverymanager plus Versi 6.0 build6050
zohocorp manageengine recoverymanager plus Versi 6.0 build6051
zohocorp manageengine recoverymanager plus Versi 6.0 build6053
zohocorp manageengine recoverymanager plus Versi 6.0 build6054
zohocorp manageengine recoverymanager plus Versi 6.0 build6056
zohocorp manageengine recoverymanager plus Versi 6.0 build6057
zohocorp manageengine recoverymanager plus Versi 6.0 build6058
zohocorp manageengine recoverymanager plus Versi 6.0 build6060
zohocorp manageengine recoverymanager plus Versi 6.0 build6061
zohocorp manageengine recoverymanager plus Versi 6.0 build6062

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.