CVE-2023-35785

Published: Aug 28, 2023Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability.

Affected (235)

Zohocorp

17 products

Manageengine Ad360

Manageengine Adaudit Plus

Manageengine Admanager Plus

Manageengine Assetexplorer

Manageengine Cloud Security Plus

Manageengine Datasecurity Plus

Manageengine Eventlog Analyzer

Manageengine Exchange Reporter Plus

Manageengine Log360

Manageengine Log360 Ueba

Manageengine M365 Manager Plus

Manageengine M365 Security Plus

Manageengine Recoverymanager Plus

Manageengine Servicedesk Plus

Manageengine Servicedesk Plus Msp

Manageengine Sharepoint Manager Plus

Manageengine Supportcenter Plus

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Ad360	Before 4.3
Zohocorp Manageengine Ad360	Version 4.3 4300
Zohocorp Manageengine Ad360	Version 4.3 4302
Zohocorp Manageengine Ad360	Version 4.3 4303
Zohocorp Manageengine Ad360	Version 4.3 4304
Zohocorp Manageengine Ad360	Version 4.3 4305
Zohocorp Manageengine Ad360	Version 4.3 4306
Zohocorp Manageengine Ad360	Version 4.3 4308
Zohocorp Manageengine Ad360	Version 4.3 4309
Zohocorp Manageengine Ad360	Version 4.3 4310
Zohocorp Manageengine Ad360	Version 4.3 4312
Zohocorp Manageengine Ad360	Version 4.3 4313
Zohocorp Manageengine Ad360	Version 4.3 4314
Zohocorp Manageengine Ad360	Version 4.3 4315

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adaudit Plus	Before 7.2
Zohocorp Manageengine Adaudit Plus	Version 7.2 7200
Zohocorp Manageengine Adaudit Plus	Version 7.2 7201
Zohocorp Manageengine Adaudit Plus	Version 7.2 7202

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Admanager Plus	Before 7.2
Zohocorp Manageengine Admanager Plus	Version 7.2 7201

Configuration D

46 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Assetexplorer	Before 6.9
Zohocorp Manageengine Assetexplorer	Version 6.9
Zohocorp Manageengine Assetexplorer	Version 6.9 6900
Zohocorp Manageengine Assetexplorer	Version 6.9 6901
Zohocorp Manageengine Assetexplorer	Version 6.9 6902
Zohocorp Manageengine Assetexplorer	Version 6.9 6903
Zohocorp Manageengine Assetexplorer	Version 6.9 6904
Zohocorp Manageengine Assetexplorer	Version 6.9 6905
Zohocorp Manageengine Assetexplorer	Version 6.9 6906
Zohocorp Manageengine Assetexplorer	Version 6.9 6907
Zohocorp Manageengine Assetexplorer	Version 6.9 6908
Zohocorp Manageengine Assetexplorer	Version 6.9 6909
Zohocorp Manageengine Assetexplorer	Version 6.9 6950
Zohocorp Manageengine Assetexplorer	Version 6.9 6951
Zohocorp Manageengine Assetexplorer	Version 6.9 6952
Zohocorp Manageengine Assetexplorer	Version 6.9 6953
Zohocorp Manageengine Assetexplorer	Version 6.9 6954
Zohocorp Manageengine Assetexplorer	Version 6.9 6955
Zohocorp Manageengine Assetexplorer	Version 6.9 6956
Zohocorp Manageengine Assetexplorer	Version 6.9 6957
Zohocorp Manageengine Assetexplorer	Version 6.9 6970
Zohocorp Manageengine Assetexplorer	Version 6.9 6971
Zohocorp Manageengine Assetexplorer	Version 6.9 6972
Zohocorp Manageengine Assetexplorer	Version 6.9 6973
Zohocorp Manageengine Assetexplorer	Version 6.9 6974
Zohocorp Manageengine Assetexplorer	Version 6.9 6975
Zohocorp Manageengine Assetexplorer	Version 6.9 6976
Zohocorp Manageengine Assetexplorer	Version 6.9 6977
Zohocorp Manageengine Assetexplorer	Version 6.9 6978
Zohocorp Manageengine Assetexplorer	Version 6.9 6979
Zohocorp Manageengine Assetexplorer	Version 6.9 6980
Zohocorp Manageengine Assetexplorer	Version 6.9 6981
Zohocorp Manageengine Assetexplorer	Version 6.9 6982
Zohocorp Manageengine Assetexplorer	Version 6.9 6983
Zohocorp Manageengine Assetexplorer	Version 6.9 6984
Zohocorp Manageengine Assetexplorer	Version 6.9 6985
Zohocorp Manageengine Assetexplorer	Version 6.9 6986
Zohocorp Manageengine Assetexplorer	Version 6.9 6987
Zohocorp Manageengine Assetexplorer	Version 6.9 6988
Zohocorp Manageengine Assetexplorer	Version 6.9 6989
Zohocorp Manageengine Assetexplorer	Version 6.9 6990
Zohocorp Manageengine Assetexplorer	Version 6.9 6991
Zohocorp Manageengine Assetexplorer	Version 6.9 6992
Zohocorp Manageengine Assetexplorer	Version 6.9 6993
Zohocorp Manageengine Assetexplorer	Version 7.0 7000
Zohocorp Manageengine Assetexplorer	Version 7.0 7001

Configuration E

30 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Cloud Security Plus	Before 4.1
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4100
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4101
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4102
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4103
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4104
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4105
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4106
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4107
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4108
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4109
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4110
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4111
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4112
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4113
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4115
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4116
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4117
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4118
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4119
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4120
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4121
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4122
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4130
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4131
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4140
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4141
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4150
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4160
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4161

Configuration F

4 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Datasecurity Plus	Before 6.1
Zohocorp Manageengine Datasecurity Plus	Version 6.1 6100
Zohocorp Manageengine Datasecurity Plus	Version 6.1 6101
Zohocorp Manageengine Datasecurity Plus	Version 6.1 6110

Configuration G

3 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Eventlog Analyzer	Before 12.3.0
Zohocorp Manageengine Eventlog Analyzer	Version 12.3.0 12300
Zohocorp Manageengine Eventlog Analyzer	Version 12.3.0 12301

Configuration H

11 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Exchange Reporter Plus	Before 5.7
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5700
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5701
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5702
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5703
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5704
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5705
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5706
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5707
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5708
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5709

Configuration I

8 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Log360	Before 5.3
Zohocorp Manageengine Log360	Version 5.3 build5300
Zohocorp Manageengine Log360	Version 5.3 build5301
Zohocorp Manageengine Log360	Version 5.3 build5302
Zohocorp Manageengine Log360	Version 5.3 build5305
Zohocorp Manageengine Log360	Version 5.3 build5310
Zohocorp Manageengine Log360	Version 5.3 build5311
Zohocorp Manageengine Log360	Version 5.3 build5315

Configuration J

20 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4010
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4011
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4015
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4016
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4020
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4021
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4023
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4024
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4025
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4026
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4027
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4028
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4030
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4031
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4034
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4035
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4036
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4040
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4043
Zohocorp Manageengine Log360 Ueba	Version 4.0 build4045

Configuration K

24 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine M365 Manager Plus	Before 4.5
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4500
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4502
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4503
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4504
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4505
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4507
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4508
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4509
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4510
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4511
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4512
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4513
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4514
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4516
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4517
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4518
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4519
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4520
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4523
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4525
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4527
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4528
Zohocorp Manageengine M365 Manager Plus	Version 4.5 build4529

Configuration L

24 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine M365 Security Plus	Before 4.5
Zohocorp Manageengine M365 Security Plus	Version 4.5 4500
Zohocorp Manageengine M365 Security Plus	Version 4.5 4502
Zohocorp Manageengine M365 Security Plus	Version 4.5 4503
Zohocorp Manageengine M365 Security Plus	Version 4.5 4504
Zohocorp Manageengine M365 Security Plus	Version 4.5 4505
Zohocorp Manageengine M365 Security Plus	Version 4.5 4507
Zohocorp Manageengine M365 Security Plus	Version 4.5 4508
Zohocorp Manageengine M365 Security Plus	Version 4.5 4509
Zohocorp Manageengine M365 Security Plus	Version 4.5 4510
Zohocorp Manageengine M365 Security Plus	Version 4.5 4511
Zohocorp Manageengine M365 Security Plus	Version 4.5 4512
Zohocorp Manageengine M365 Security Plus	Version 4.5 4513
Zohocorp Manageengine M365 Security Plus	Version 4.5 4514
Zohocorp Manageengine M365 Security Plus	Version 4.5 4516
Zohocorp Manageengine M365 Security Plus	Version 4.5 4517
Zohocorp Manageengine M365 Security Plus	Version 4.5 4518
Zohocorp Manageengine M365 Security Plus	Version 4.5 4519
Zohocorp Manageengine M365 Security Plus	Version 4.5 4520
Zohocorp Manageengine M365 Security Plus	Version 4.5 4523
Zohocorp Manageengine M365 Security Plus	Version 4.5 4525
Zohocorp Manageengine M365 Security Plus	Version 4.5 4527
Zohocorp Manageengine M365 Security Plus	Version 4.5 4528
Zohocorp Manageengine M365 Security Plus	Version 4.5 4529

Configuration M

28 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Recoverymanager Plus	Before 6.0
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6001
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6003
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6005
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6011
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6016
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6017
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6020
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6025
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6026
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6030
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6031
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6032
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6041
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6042
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6043
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6044
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6047
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6049
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6050
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6051
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6053
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6054
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6056
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6057
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6058
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6060
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6061

Configuration N

9 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Servicedesk Plus	Before 14.2
Zohocorp Manageengine Servicedesk Plus	Version 14.2 14200
Zohocorp Manageengine Servicedesk Plus	Version 14.2 14201
Zohocorp Manageengine Servicedesk Plus	Version 14.2 14202
Zohocorp Manageengine Servicedesk Plus	Version 14.2 14203
Zohocorp Manageengine Servicedesk Plus	Version 14.2 14204
Zohocorp Manageengine Servicedesk Plus	Version 14.3 14300
Zohocorp Manageengine Servicedesk Plus	Version 14.3 14301
Zohocorp Manageengine Servicedesk Plus	Version 14.3 14302

Configuration O

2 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Servicedesk Plus Msp	Before 14.3
Zohocorp Manageengine Servicedesk Plus Msp	Version 14.3 14300

Configuration P

4 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Sharepoint Manager Plus	Before 4.4
Zohocorp Manageengine Sharepoint Manager Plus	Version 4.4 4400
Zohocorp Manageengine Sharepoint Manager Plus	Version 4.4 4401
Zohocorp Manageengine Sharepoint Manager Plus	Version 4.4 4402