Product NameAffected Version(s)Fixed VersionFixed on
AD3604315 and below431620/06/2023
SupportCenter Plus14300 and below1430119/06/2023
M365 Manager Plus4530 and below453121/06/2023
M365 Security Plus4530 and below453121/06/2023
Analytics Plus5240 and below525028/06/2023

Details
A security vulnerability (CVE-2023-35785) was reported by dalt4sec through the Zoho BugBounty program, allowing adversaries to bypass 2FA during the login process.

What should you do?
The latest build versions of these ManageEngine solutions holds the recommended mitigation targeting the vulnerability. We recommend users upgrade to the latest build.

Steps to upgrade
AD360: Download the latest service pack here.

SupportCenter Plus: Download the latest service pack here.

M365 Manager Plus: Download the latest service pack here

M365 Security Plus: Download the latest service pack here

Analytics Plus: Download the latest service pack here

Apply the latest build to your existing product installation as per the upgrade pack instructions in the link provided above.

Important Note: Don’t forget to make a backup of your installation folder before you upgrade and keep the backup in a separate location. If anything goes wrong, you will have this copy as a backup which will keep all your settings intact. If you’re using an MS SQL server as the back-end database, back up the application database before upgrading. Once the upgrade is successfully completed, remember to delete the backup.

For more information or if you have any questions/concerns feel free to contact us

This article is relevant to:
IT SecurityManageEngineSecurity Advisory

You may be interested in these other recent articles

Security Advisory – Important Security Update For PAM360

19 June 2025

Product Name Affected Version(s) PAM360 7500 PAM360 MSP 7410 DetailsIn build 7410 of PAM360 MSP, ManageEngine rolled out an enhancement to granularly mask/unmask shared passwords…

Read more

The New Endpoint Central Integration for ServiceDesk Plus Cloud

30 May 2025

At Set3 Solutions, the award-winning UK partner of ManageEngine, we help clients unlock the full potential of their ManageEngine tools—whether it’s optimising service delivery or…

Read more

Latest Updates for ManageEngine Endpoint Central

27 May 2025

Discover the latest Endpoint Central updates, including new features, fixes, and enhancements.

Read more

Accelerating NetFlow Analyzer Availability on AWS: How Set3 Solutions Helped a Leading UK Retailer Move Forward

23 May 2025

At Set3 Solutions, we help UK businesses unlock the full value of ManageEngine—from licensing and deployment to long-term strategic advice. So when a leading UK…

Read more