CVE-2023-48646

Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings

published November 22, 2023

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
82%
Percentile
99.7
In the wild
Unconfirmed
What it is

Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.82163 · 99.7th percentile
Published
2023-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings
    cvelistv5