Is ManageEngine safe right now?
No ManageEngine flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 7, 2023). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
- Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zero-day
- Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- Zoho Desktop Central Authentication Bypass Vulnerability Zero-day
- Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Zero-day
- Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
- Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
- Zoho ManageEngine Desktop Central File Upload Vulnerability
- Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 0 | 0 |
| 2025 | 0 | 0 |
| 2024 | 0 | 0 |
| 2023 | 2 | 1 |
| 2022 | 1 | 0 |
Questions
Is ManageEngine safe right now?
No ManageEngine flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 7, 2023). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many ManageEngine vulnerabilities have been exploited?
9 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 2 of them used by ransomware.
Covers products matching manageengine, zoho. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.