Zoho And Fortinet Releases Advisory Warning High-Severity Vulnerabilities. Patch Now!

We strongly recommend applying the security update for these vulnerabilities on high priority.

Date 5th January 2023 CVE(s) CVE-2022-47523, CVE-2022-39947, CVE-2022-35845 Affected Product(s) Zoho PAM360, Zoho Access Manager Plus, Zoho Password Manager Pro, Fortinet FortiADC, Fortinet FortiTester Severity High Zoho And Fortinet Releases Advisory Warning High-Severity Vulnerabilities. Patch Now! Zoho addresses a critical security vulnerability CVE-2022-47523 in Zoho ManageEngine PAM360, Zoho ManageEngine Access Manager Plus, and Zoho ManageEngine Password Manager Pro. The critical vulnerability exists due to insufficient sanitization of user-supplied data. Successful exploitation of this vulnerability allows a remote attacker to read, delete, and modify data in the database and gain complete control over the affected application. Fortinet has also addressed critical command injection flaws CVE-2022-39947 and CVE-2022-35845 in multiple versions of FortiADC and FortiTester.  The flaws exist due to improper neutralization of special elements used in both products. Successful exploitation will allow the remote attacker to execute arbitrary code on the affected system. We strongly recommend applying the security update for these vulnerabilities on high priority. And if you found this valuable, please share it with your other IT SysAdmin Friends! Stay Alert and Secure! Team SecPod If you have any questions related to support, please write to us at support@secpod.com. To contact our sales team, please email us at info@secpod.com  Copyright © 2021, SecPod, Inc. All rights reserved. 303 Twin Dolphin Drive, 6th Floor, Redwood City, California 94065, USA | Unsubscribe here