Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

manageengine oputils vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2014-8678
The ConfigSaveServlet servlet in ManageEngine OpUtils before build 71024 allows remote malicious users to "disclose" files via a crafted filename, related to "saveFile."
Manageengine Oputils
7.5
CVSSv2
CVE-2010-1044
SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote malicious users to execute arbitrary SQL commands via the isHttpPort parameter.
Manageengine Oputils 5.0
4.3
CVSSv2
CVE-2008-2797
Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote malicious users to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP graph. NOTE: the provenance of this information is unknown; the details are ...
Manageengine Oputils 5.0
4.3
CVSSv2
CVE-2018-12998
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote m...
Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -
5
CVSSv2
CVE-2018-12997
Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows malicious u...
Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -
NA
CVE-2022-38772
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Plus 12.6Zohocorp Manageengine Opmanager Plus 12.5
NA
CVE-2023-47211
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.7Zohocorp Manageengine OputilsZohocorp Manageengine Oputils 12.7Zohocorp Manageengine Firewall Analyzer 12.7Zohocorp Manageengine Firewall AnalyzerZohocorp Manageengine Netflow Analyzer 12.7Zohocorp Manageengine Netflow AnalyzerZohocorp Manageengine Network Configuration Manager 12.7Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Opmanager Msp 12.7Zohocorp Manageengine Opmanager MspZohocorp Manageengine Opmanager Plus 12.7Zohocorp Manageengine Opmanager Plus
NA
CVE-2022-36923
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils prior to 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated malicious users to obtain a user's AP...
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Firewall Analyzer 12.5Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Firewall Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Plus 12.6Zohocorp Manageengine Opmanager Plus 12.5Zohocorp Manageengine Opmanager Msp 12.6
NA
CVE-2022-37024
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execut...
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Firewall Analyzer 12.5Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Firewall Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Msp 12.6Zohocorp Manageengine Opmanager Plus 12.5Zohocorp Manageengine Opmanager Plus 12.6
7.2
CVSSv2
CVE-2019-12133
Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associated with said products try to execute binaries such as sc.exe from the current di...
Zohocorp Manageengine Mobile Device Manager Plus 9.0.0Zohocorp Manageengine Patch Connect Plus 9.0.0Zohocorp Manageengine Vulnerability Manager Plus 9.0.0Zohocorp Manageengine Patch Manager Plus 9.0.0Zohocorp Manageengine Browser Security Plus -Zohocorp Manageengine Eventlog Analyzer 12.0.2Zohocorp Manageengine Supportcenter Plus 8.1Zohocorp Manageengine Opmanager 12.3Zohocorp Manageengine Oputils 11.0Zohocorp Manageengine Desktop Central 10.0.380Zohocorp Manageengine Firewall 12.0Zohocorp Manageengine Key Manager Plus 5.6Zohocorp Manageengine Password Manager Pro 9.9Zohocorp Manageengine Analytics Plus 1.0Zohocorp Manageengine Servicedesk Plus 10.0.0Zohocorp Manageengine O365 Manager Plus 4.0Zohocorp Manageengine Netflow Analyzer 11.0Zohocorp Manageengine Network Configuration Manager 11.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook