CVE-2022-23050

2022-05-2418:02:05

Fluid Attacks

www.cve.org

cve-2022-23050

manageengine appmanager15

authenticated admin user

upload dll file

dll hijack attack

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

61.5%

JSON

ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the ‘working’ folder through the ‘Upload Files / Binaries’ functionality.

CNA Affected

[
  {
    "product": "ManageEngine AppManager15",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Build No:15510"
      }
    ]
  }
]