https://pwn.watch/i/zoho-manageengine-cve-2022-47966 Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. Added to CISA KEV on 2023-01-23. CISA lists known use in ransomware campaigns. en Mon, 23 Jan 2023 00:00:00 GMT https://pwn.watch/i/zoho-manageengine-cve-2022-47966 https://pwn.watch/i/zoho-manageengine-cve-2022-47966#2023-01-23-8511a88b Mon, 23 Jan 2023 00:00:00 GMT critical <p>Zoho ManageEngine: Remote Code Execution (CVE-2022-47966): CISA added CVE-2022-47966 to the KEV catalog (due 2023-02-13).</p>