zohocorp manageengine assetexplorer

Name: zohocorp manageengine assetexplorer
Brand: zohocorp

productUS

cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical8high14medium1low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-47966US	critical9.8OT critical	99.8% (100th)	KEV	6.9	2023-01-18	2 versions
CVE-2015-2169US	medium4.3	7.69% (95th)	Exploit	no fix	2015-06-24	= 6.1
CVE-2023-26601US	high7.5	34.1% (98th)	—	6.9	2023-03-06	2 versions
CVE-2021-20110US	critical9.8	7.38% (94th)	—	no fix	2021-07-19	= 1.0.34
CVE-2023-26600US	medium6.5	6.31% (94th)	—	6.9	2023-03-06	2 versions
CVE-2022-35403US	high7.5	6.21% (93rd)	—	6.9	2022-07-12	2 versions
CVE-2019-19034US	high7.2	5.97% (93rd)	—	no fix	2020-03-23	= 6.5
CVE-2021-20108US	high7.5	4.50% (91st)	—	no fix	2021-07-19	= 1.0.34
CVE-2019-12994US	critical9.1	4.39% (91st)	—	no fix	2019-08-08	= 6.2.0
CVE-2019-14693US	high8.1	4.25% (91st)	—	no fix	2019-08-08	= 6.2.0
CVE-2012-5956US	medium4.3	4.09% (91st)	—	no fix	2012-12-11	≤ 5.6
CVE-2022-40771US	medium4.9	3.71% (90th)	—	6.9	2022-11-23	2 versions
CVE-2022-40772US	medium6.5	3.18% (88th)	—	6.9	2022-11-23	2 versions
CVE-2019-12959US	high8.8	3.11% (88th)	—	6.2.0	2019-08-08	< 6.2.0
CVE-2023-29443US	medium4.9	3.03% (87th)	—	no fix	2023-04-26	= 6.9
CVE-2023-23075US	medium6.1	2.63% (85th)	—	no fix	2023-02-01	= 6.9
CVE-2023-35785US	high8.1	2.43% (84th)	—	6.9	2023-08-28	3 versions
CVE-2015-5061US	low3.5	2.34% (84th)	—	no fix	2015-06-24	= 6.1
CVE-2018-17596US	medium6.1	2.34% (84th)	—	no fix	2018-10-02	= 6.2.0
CVE-2019-12596US	medium6.1	2.18% (82nd)	—	no fix	2019-07-11	= 6.5
CVE-2019-12597US	medium6.1	2.17% (82nd)	—	no fix	2019-07-11	= 6.5
CVE-2019-12595US	medium6.1	2.17% (82nd)	—	no fix	2019-07-11	= 6.5
CVE-2019-12537US	medium6.1	2.17% (82nd)	—	no fix	2019-07-11	= 6.5
CVE-2020-8838US	medium6.4	1.56% (75th)	—	no fix	2020-03-23	= 6.5
CVE-2021-20109US	high7.5	1.38% (72nd)	—	no fix	2021-07-19	= 1.0.34
CVE-2023-6105US	medium5.5	0.69% (53rd)	—	7.0	2023-11-15	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan