Product of Zoho

ManageEngine

As of , 6 Zoho ManageEngine vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2020-10189.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2020-10189Desktop Central File UploadZoho ManageEnginePatch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry0.99
2CVE-2022-28810ADSelfService Plus Remote Code ExecutionZoho ManageEnginePatch this weekMetasploit module; EPSS 0.710.71
3CVE-2022-47966Multiple Products Remote Code ExecutionZoho ManageEnginePatch this weekRansomware use; Metasploit module; EPSS 0.990.99
4CVE-2022-35405Multiple Products Remote Code ExecutionZoho ManageEnginePatch this weekMetasploit module; EPSS 0.990.99
5CVE-2019-8394ServiceDesk Plus (SDP) File UploadZoho ManageEnginePatch this weekMetasploit module; EPSS 0.630.63
6CVE-2021-40539ADSelfService Plus Authentication BypassZoho ManageEnginePatch this weekRansomware use; Metasploit module; EPSS 0.990.99

Added each year

1232021: 3320212022: 1120222023: 2220232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20213
20221
20232
2024none
2025none
2026none

Used in ransomware