CVE-2023-48646

nvd nist

Published: Nov 22, 2023Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings.

Affected (29)

Products: Zohocorp: Manageengine Recoverymanager Plus

Zohocorp

1 product

Manageengine Recoverymanager Plus

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Recoverymanager Plus	Before 6.0
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6001
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6003
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6005
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6011
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6016
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6017
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6020
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6025
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6026
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6030
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6031
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6032
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6041
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6042
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6043
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6044
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6047
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6049
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6050
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6051
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6053
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6054
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6056
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6057
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6058
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6060
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6061
Zohocorp Manageengine Recoverymanager Plus	Version 6.0 build6062

References (2)

https://www.manageengine.com/ad-recovery-manager/advisory/CVE-2023-48646.html

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/ad-recovery-manager/advisory/CVE-2023-48646.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.