{"metadata": {"vulnerability": "CVE-2022-35405", "count": 58, "kinds": {"milestone": 4, "sighting": 23, "kev": 17, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2022-07-08T00:00:00Z", "date_only": false, "value": "2022-07-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-19T15:15:00Z", "date_only": false, "value": "2022-07-19T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J9C5-6P9G-HWF3", "record": "GHSA-J9C5-6P9G-HWF3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-07-19T15:15:00Z", "date_only": false, "value": "2022-07-19T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-35405", "record": "GSD-2022-35405", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-07-19T15:15:08.680Z", "date_only": false, "value": "2022-07-19T15:15:08.680", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35405", "record": "FKIE_CVE-2022-35405", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-19T18:40:49Z", "date_only": false, "value": "2022-07-19T18:40:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/46547", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "4def4f56-0a01-4ec4-a312-6ae4e70db7a8", "content": "\u203c CVE-2022-35405 \u203c\n\nZoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/46547"}, {"timestamp": "2022-07-20T00:00:22Z", "date_only": false, "value": "2022-07-20T00:00:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J9C5-6P9G-HWF3", "record": "GHSA-J9C5-6P9G-HWF3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-08-02T11:49:26Z", "date_only": false, "value": "2022-08-02T11:49:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6516", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "850ec003-982a-49b1-b349-97a1202499d4", "content": "#exploit\n1. CVE-2022-35405:\nZoho Password Manager Pro XML-RPC RCE\nhttps://xz.aliyun.com/t/11578\n\n2. CVE-2022-32832:\nPoC and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6\nhttps://github.com/Muirey03/CVE-2022-32832", "url": "https://t.me/CyberSecurityTechnologies/6516", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-02T22:05:45Z", "date_only": false, "value": "2022-08-02T22:05:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/zoho_password_manager_pro_xml_rpc_rce.rb", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "633c319c-a699-4904-a8f2-d37ddcfd884a", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/zoho_password_manager_pro_xml_rpc_rce.rb"}, {"timestamp": "2022-08-03T17:06:34Z", "date_only": false, "value": "2022-08-03T17:06:34.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-35405", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "019ef5da-ca49-4704-a241-928662626876", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": true, "value": "2022-09-22", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-35405", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-35405", "field": "evidence.0.details.added_date", "uuid": "019ef5da-ca49-4704-a241-928662626876", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": true, "value": "2022-09-22", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "evidence.0.details.date_added", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-35405", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "019ef5da-ca49-4704-a241-928662626876", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "status.status_updated_at", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-35405", "field": "status.status_updated_at", "uuid": "019ef5da-ca49-4704-a241-928662626876", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-35405", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2022-35405 added to CISA KEV"}, {"timestamp": "2022-09-23T13:17:10Z", "date_only": false, "value": "2022-09-23T13:17:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/65280", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "8698e742-2d9a-489a-914c-9bb7aff8ae58", "content": "Critical ManageEngine RCE flaw is being exploited (CVE-2022-35405)\n\nhttps://ift.tt/TqJjQzx", "url": "https://t.me/ctinow/65280", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-09-23T20:40:05Z", "date_only": false, "value": "2022-09-23T20:40:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3463", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "0c84b47d-629d-4af2-a862-77189f3392de", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e Zoho ManageEngine \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0435\u043d\u043d\u043e\u0435 Zoho \u0432 2014 \u0433\u043e\u0434\u0443, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u0418\u0422-\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c, \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0418\u0422-\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2022-35405\u00a0\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 RCE, \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 ManageEngine Password Manager Pro \u0434\u043e 12101, ManageEngine PAM360 \u0434\u043e 5510 \u0438 ManageEngine Access Manager Plus \u0434\u043e 4303.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0430\u0433\u0438 \u0432 ManageEngine Password Manager Pro \u0438 PAM360 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b ManageEngine Access Manager Plus, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n\u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Zoho \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u044e\u043d\u0435, PoC \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u043b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440, \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0432\u00a0\u0431\u043b\u043e\u0433\u0435 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u0441\u0432\u043e\u0438\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432.\n\n\u041f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2022-35405 \u0432 \u0441\u0432\u043e\u0439\u00a0\u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Password Manager Pro, PAM360 \u0438 Access Manager Plus.", "url": "https://t.me/true_secator/3463", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-09-28T14:10:40Z", "date_only": false, "value": "2022-09-28T14:10:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0cbcc79f-9f21-49e4-b464-6bd019954888", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "1fc52be1-f463-4354-88b0-204cbe7426d0"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": true, "value": "2022-10-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "evidence.0.details.due_date", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-10-23T06:42:05Z", "date_only": false, "value": "2022-10-23T06:42:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4-fw1SMsqhXTA-suR6s8dMle__6UIwsg7gau1uudjK1rn3k", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "e9fff883-2059-4a01-93c4-0529c56ea7a0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-05T02:45:00Z", "date_only": false, "value": "2022-11-05T02:45Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-35405", "record": "GSD-2022-35405", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "44232850-0e87-4035-9a8b-b75cc247e61b"}, {"timestamp": "2023-12-04T04:37:09Z", "date_only": false, "value": "2023-12-04T04:37:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1115", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "d461ac36-1cde-481a-93ac-edc582b04d34", "content": "#ExploitObserverAlert\n\nCVE-2022-35405\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2022-35405. Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)\n\nFIRST-EPSS: 0.974490000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1115"}, {"timestamp": "2023-12-13T01:19:33.283Z", "date_only": false, "value": "2023-12-13T01:19:33.283725Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-35405", "record": "GSD-2022-35405", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-18T04:49:06Z", "date_only": false, "value": "2023-12-18T04:49:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1915", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "9bcc6536-a656-4292-a75d-4c695f8bb5cb", "content": "#ExploitObserverAlert\n\nCVE-2022-35405\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2022-35405. Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)\n\nFIRST-EPSS: 0.974500000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1915"}, {"timestamp": "2024-08-03T09:36:44.093Z", "date_only": false, "value": "2024-08-03T09:36:44.093Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-35405", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:33:11.753Z", "date_only": false, "value": "2024-12-24T20:33:11.753038Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971717", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "38deac58-f8cb-4256-a057-ce52a8432a8b", "url": "https://feedsin.space/feed/CISAKevBot/items/2971717"}, {"timestamp": "2025-01-28T21:46:55.411Z", "date_only": false, "value": "2025-01-28T21:46:55.411915Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-35405", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-28T21:46:55.411Z", "date_only": false, "value": "2025-01-28T21:46:55.411915Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35405", "record": "FKIE_CVE-2022-35405", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "c0d0207c-56df-4576-8775-7ad9bdb2164a"}, {"timestamp": "2025-02-23T02:10:38Z", "date_only": false, "value": "2025-02-23T02:10:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "95799aac-5b1d-456d-af48-50f73a0b393a"}, {"timestamp": "2025-02-23T04:10:47Z", "date_only": false, "value": "2025-02-23T04:10:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "325fd043-3984-4b84-97c2-928d0dcfa0ab"}, {"timestamp": "2025-10-21T23:15:38.007Z", "date_only": false, "value": "2025-10-21T23:15:38.007Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:38.007Z", "date_only": false, "value": "2025-10-21T23:15:38.007Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-35405", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:34Z", "date_only": false, "value": "2025-10-22T00:32:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J9C5-6P9G-HWF3", "record": "GHSA-J9C5-6P9G-HWF3", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:27:12.447Z", "date_only": false, "value": "2026-02-02T12:27:12.447542Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ddf39d29-06c6-4be7-8d79-01d502591086", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "8259aaa7-c6bf-495d-b48b-99a97b3a0a93", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ddf39d29-06c6-4be7-8d79-01d502591086", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T04:51:46.637Z", "date_only": false, "value": "2026-06-17T04:51:46.637", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35405", "record": "FKIE_CVE-2022-35405", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:47:03.431Z", "date_only": false, "value": "2026-06-19T12:47:03.431687Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3d46bde-1cf2-4b46-94e5-ad7f260ec3d2", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "81b60b6b-2284-4f94-b695-b79c8f2a30e8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3d46bde-1cf2-4b46-94e5-ad7f260ec3d2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-35405", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "019ef5da-ca49-4704-a241-928662626876", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:33.531Z", "date_only": false, "value": "2026-06-23T14:05:33.531001Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/019ef5da-ca49-4704-a241-928662626876", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "2d83bc87-7f0f-48c0-bf47-f68bf341683e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/019ef5da-ca49-4704-a241-928662626876", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:01:01.324Z", "date_only": false, "value": "2026-07-29T12:01:01.324159Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2308", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "0a084c2d-06c5-4279-ad47-e53629f0ecd9", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-35405\nGithub: https://github.com/viniciuspereiras/CVE-2022-35405\nDescribe: \nZoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)", "url": "https://t.me/CVEhub/2308"}, {"timestamp": "2026-08-01T04:00:04.960Z", "date_only": false, "value": "2026-08-01T04:00:04.960220Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2308", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "a9c197b2-66fa-45b1-9afe-f4f728adaf84", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-35405\nGithub: https://github.com/viniciuspereiras/CVE-2022-35405\nDescribe: \nZoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)", "url": "https://t.me/CVEhub/2308", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-21T01:10:55Z", "date_only": false, "value": "2026-09-21T01:10:55+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-21T01:10:55Z", "date_only": false, "value": "2026-09-21T01:10:55+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-35405", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T15:00:20Z", "date_only": false, "value": "2026-10-12T15:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gQw6Tk4S68cUerPGOEWgSrdu1kP0YUiws5BLoz0HtxunsJA", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "7c1c8fbb-5033-49b5-a61b-9f15066bfb28", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-12T15:00:20Z", "date_only": false, "value": "2026-10-12T15:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gQw6Tk4S68cUerPGOEWgSrdu1kP0YUiws5BLoz0HtxunsJA", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "a3c3df53-0b90-436d-ab13-7eca20c68a8e"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-16)", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "481aa8a9-c064-4799-abef-a1631d050095"}, {"timestamp": "2026-10-21T08:51:06.264Z", "date_only": false, "value": "2026-10-21T08:51:06.264202Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "1e881a5c-eec1-4267-9112-a4699d8b9afd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-35405", "field": "timestamps.last_seen_at", "uuid": "ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-35405", "field": "evidence.0.details.observation_date", "uuid": "ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-35405", "field": "status.status_updated_at", "uuid": "ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-08T01:00:03Z", "date_only": false, "value": "2026-11-08T01:00:03+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-35405", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "ed23c1ab-3d62-4d51-8be0-fc09b72962bc", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-12T11:31:40.576Z", "anchors": {"origin": {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-08-02T11:49:26Z", "date_only": false, "value": "2022-08-02T11:49:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6516", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "850ec003-982a-49b1-b349-97a1202499d4", "content": "#exploit\n1. CVE-2022-35405:\nZoho Password Manager Pro XML-RPC RCE\nhttps://xz.aliyun.com/t/11578\n\n2. CVE-2022-32832:\nPoC and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6\nhttps://github.com/Muirey03/CVE-2022-32832", "url": "https://t.me/CyberSecurityTechnologies/6516", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 5562493.0, "hours": 1545.1369444444445, "days": 64.38070601851852, "min_seconds": 5562493.0, "max_seconds": 5648893.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 5562493.0, "hours": 1545.1369444444445, "days": 64.38070601851852, "min_seconds": 5562493.0, "max_seconds": 5648893.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1198659.0, "hours": 332.9608333333333, "days": 13.873368055555556, "min_seconds": 1198659.0, "max_seconds": 1198659.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-08-02T11:49:26Z", "date_only": false, "value": "2022-08-02T11:49:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6516", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "850ec003-982a-49b1-b349-97a1202499d4", "content": "#exploit\n1. CVE-2022-35405:\nZoho Password Manager Pro XML-RPC RCE\nhttps://xz.aliyun.com/t/11578\n\n2. CVE-2022-32832:\nPoC and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6\nhttps://github.com/Muirey03/CVE-2022-32832", "url": "https://t.me/CyberSecurityTechnologies/6516", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 136240793.576375, "hours": 37844.66488232639, "days": 1576.8610367635997, "min_seconds": 136240793.576375, "max_seconds": 136240793.576375, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-19T14:51:47Z", "date_only": false, "value": "2022-07-19T14:51:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35405", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T11:31:40.576Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 130678300.576375, "hours": 36299.52793788194, "days": 1512.480330745081, "min_seconds": 130591900.576375, "max_seconds": 130678300.576375, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-35405", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ddf39d29-06c6-4be7-8d79-01d502591086", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-12T11:31:40.576Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 135042134.576375, "hours": 37511.70404899306, "days": 1562.987668708044, "min_seconds": 135042134.576375, "max_seconds": 135042134.576375, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-08-02T11:49:26Z", "date_only": false, "value": "2022-08-02T11:49:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6516", "record": "CVE-2022-35405", "field": "creation_timestamp", "uuid": "850ec003-982a-49b1-b349-97a1202499d4", "content": "#exploit\n1. CVE-2022-35405:\nZoho Password Manager Pro XML-RPC RCE\nhttps://xz.aliyun.com/t/11578\n\n2. CVE-2022-32832:\nPoC and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6\nhttps://github.com/Muirey03/CVE-2022-32832", "url": "https://t.me/CyberSecurityTechnologies/6516", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T11:31:40.576Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}