| Product Name | Affected Version(s) | Fixed Version | Fixed on |
| AD360 | 4315 and below | 4316 | 20/06/2023 |
| SupportCenter Plus | 14300 and below | 14301 | 19/06/2023 |
| M365 Manager Plus | 4530 and below | 4531 | 21/06/2023 |
| M365 Security Plus | 4530 and below | 4531 | 21/06/2023 |
| Analytics Plus | 5240 and below | 5250 | 28/06/2023 |
Details
A security vulnerability (CVE-2023-35785) was reported by dalt4sec through the Zoho BugBounty program, allowing adversaries to bypass 2FA during the login process.
What should you do?
The latest build versions of these ManageEngine solutions holds the recommended mitigation targeting the vulnerability. We recommend users upgrade to the latest build.
Steps to upgrade
AD360: Download the latest service pack here.
SupportCenter Plus: Download the latest service pack here.
M365 Manager Plus: Download the latest service pack here
M365 Security Plus: Download the latest service pack here
Analytics Plus: Download the latest service pack here
Apply the latest build to your existing product installation as per the upgrade pack instructions in the link provided above.
Important Note: Don’t forget to make a backup of your installation folder before you upgrade and keep the backup in a separate location. If anything goes wrong, you will have this copy as a backup which will keep all your settings intact. If you’re using an MS SQL server as the back-end database, back up the application database before upgrading. Once the upgrade is successfully completed, remember to delete the backup.
For more information or if you have any questions/concerns feel free to contact us
This article is relevant to:
IT SecurityManageEngineSecurity AdvisoryOther recent articles in the same category
You may be interested in these other recent articles
Latest Updates for ManageEngine ServiceDesk Plus Cloud
31 March 2025
Discover the latest ServiceDesk Plus Cloud updates, including new features, fixes, and enhancements.
Read moreMigrate From ServiceNow to ServiceDesk Plus
28 March 2025
ServiceNow to ServiceDesk Plus Migrating your service desk platform is a big decision, and it can feel overwhelming. If you’re currently using ServiceNow but looking…
Read moreLatest Updates for ManageEngine Endpoint Central
Discover the latest Endpoint Central updates, including new features, fixes, and enhancements.
Read moreMigrating to ServiceDesk Plus Cloud
19 March 2025
Migrating to ManageEngine ServiceDesk Plus Cloud from the on-premise edition is not a simple lift-and-shift process due to architectural differences. While both versions offer similar…
Read moreExpert Guidance on Migrating to Endpoint Central Cloud
14 March 2025
At Set3 Solutions, the award-winning UK technology partner of ManageEngine, we regularly help organisations better understand and optimise their ManageEngine applications. In this case, we…
Read more