CVEDB API

Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.7%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2023-41904

Zohocorp » Manageengine Admanager Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_admanager_plus:-
Zohocorp » Manageengine Admanager Plus » Version: 6.1

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1
Zohocorp » Manageengine Admanager Plus » Version: 6.2

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.2
Zohocorp » Manageengine Admanager Plus » Version: 6.5.7

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7
Zohocorp » Manageengine Admanager Plus » Version: 6.6

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6
Zohocorp » Manageengine Admanager Plus » Version: 6.6.5

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5
Zohocorp » Manageengine Admanager Plus » Version: 7.0

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0
Zohocorp » Manageengine Admanager Plus » Version: 7.1

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1
Zohocorp » Manageengine Admanager Plus » Version: 7.2

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2