CyberSIXT Search
Vendor

Zohocorp

No CISA KEV deadline is open. CISA last added a Zohocorp CVE on 7 Mar 2023.

Tracked since 25 Jun · latest article Wed 23 Sep · RSS

Added to KEV · 90 days
0
of 9 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2022-28810not in CyberSIXT coverageManageEngine7 Mar 2023Deadline passed 28 Mar 2023
CVE-2022-47966not in CyberSIXT coverageManageEngine23 Jan 2023Deadline passed 13 Feb 2023Known ransomware use
CVE-2022-35405not in CyberSIXT coverageManageEngine22 Sep 2022Deadline passed 13 Oct 2022
CVE-2021-44515not in CyberSIXT coverageDesktop Central10 Dec 2021Deadline passed 24 Dec 2021
CVE-2021-37415not in CyberSIXT coverageManageEngine ServiceDesk Plus (SDP)1 Dec 2021Deadline passed 15 Dec 2021
CVE-2021-44077not in CyberSIXT coverageManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus1 Dec 2021Deadline passed 15 Dec 2021
CVE-2021-40539not in CyberSIXT coverageManageEngine3 Nov 2021Deadline passed 17 Nov 2021Known ransomware use
CVE-2019-8394not in CyberSIXT coverageManageEngine3 Nov 2021Deadline passed 3 May 2022
CVE-2020-10189not in CyberSIXT coverageManageEngine3 Nov 2021Deadline passed 3 May 2022

Products

8 products · 6 CVEs in coverage
ManageEngine0 CVEs · 6 in KEVManageEngine ServiceDesk Plus0 CVEs · 1 in KEVManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus0 CVEs · 1 in KEVDesktop Central0 CVEs · 1 in KEVManageEngine OpManager2 CVEs · 0 in KEVlatest 23 Sep
3 more productsmanageengine_adselfservice_plus2 CVEs · 0 in KEVlatest 22 SepManageEngine Applications Manager1 CVE · 0 in KEVlatest 23 SepManageEngine ADAudit Plus1 CVE · 0 in KEVlatest 24 Jul

Coverage

4 articles · all timeFull timeline

4 articles from 1 outlet since 25 Jun; the latest 33 days ago.

Zohocorp: coverage over time4 articles from 1 outlet. First report 25 Jun by SecurityOnline. Busiest week: 2 articles, week of 21 Sep. 0 in the last 7 days. Zohocorp: coverage over time4 articles from 1 outlet. First report 25 Jun by SecurityOnline. Busiest week: 2 articles, week of 21 Sep. 0 in the last 7 days.
  • Article
  • First report
Show as table
Zohocorp: articles
Published (UTC)OutletHeadline
Wed 23 Sep · 17:38 UTCSecurityOnlineZoho Fixes Critical ManageEngine Flaws Exposing Cloud Credentials
Tue 22 Sep · 18:01 UTCSecurityOnlineCritical ManageEngine Flaw Lets Attackers Gain SYSTEM Access via Windows Logon Screen
Fri 24 Jul · 03:10 UTCSecurityOnlineADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote Code Execution at CVSS 10
Thu 25 Jun · 05:20 UTCSecurityOnlineZoho patches critical SSO ticket flaw in ManageEngine AD360 suite
  1. Zoho Fixes Critical ManageEngine Flaws Exposing Cloud CredentialsSecurityOnline
  2. Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access via Windows Logon ScreenSecurityOnline
  3. ADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote Code Execution at CVSS 10SecurityOnline
  4. Zoho patches critical SSO ticket flaw in ManageEngine AD360 suiteSecurityOnline

All CVEs in coverage

6
CVE-2026-76978Command Injection vulnerabilityCVSS8.8High–Not in KEV8.2%EPSS1article
CVE-2026-19599Remote Code Execution vulnerabilityCVSS9.9Critical–Not in KEV5.1%EPSS1article
CVE-2026-6516Remote Code ExecutionCVSS10.0Critical–Not in KEV4.7%EPSS1article
CVE-2026-74849Remote code execution vulnerabilityCVSS9.8Critical–Not in KEV4.6%EPSS1article
CVE-2026-86708Sensitive data exposureCVSS10.0Critical–Not in KEV2.7%EPSS1article
CVE-2026-11374Account Takeover via Predictable SSO Ticket GenerationCVSS9.0Critical–Not in KEV2.5%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device