Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine network configuration manager vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2021-43319
Zoho ManageEngine Network Configuration Manager prior to 125488 is vulnerable to command injection due to improper validation in the Ping functionality.
Zohocorp Manageengine Network Configuration Manager 11.0Zohocorp Manageengine Network Configuration Manager 12.0Zohocorp Manageengine Network Configuration Manager 12.1Zohocorp Manageengine Network Configuration Manager 12.2Zohocorp Manageengine Network Configuration Manager 12.3Zohocorp Manageengine Network Configuration Manager 12.4Zohocorp Manageengine Network Configuration Manager 12.5
9.8
CVSSv3
CVE-2021-41080
Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a hardware details search.
Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Network Configuration Manager 12.3
9.8
CVSSv3
CVE-2021-41081
Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a configuration search.
Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Network Configuration Manager 12.3
7.5
CVSSv3
CVE-2018-18980
An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager prior to 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local...
Zohocorp Manageengine OpmanagerZohocorp Manageengine Network Configuration Manager
8.2
CVSSv3
CVE-2022-35404
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Netflow AnalyzerZohocorp Manageengine Firewall AnalyzerZohocorp Manageengine Firewall Analyzer 12.5
6.1
CVSSv3
CVE-2018-12998
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote m...
Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -
7.5
CVSSv3
CVE-2018-12997
Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows malicious u...
Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -
8.8
CVSSv3
CVE-2023-29505
An issue exists in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
Zohocorp Manageengine Network Configuration Manager 12.6
8.8
CVSSv3
CVE-2022-38772
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Plus 12.6Zohocorp Manageengine Opmanager Plus 12.5
8.6
CVSSv3
CVE-2023-47211
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.7Zohocorp Manageengine OputilsZohocorp Manageengine Oputils 12.7Zohocorp Manageengine Firewall Analyzer 12.7Zohocorp Manageengine Firewall AnalyzerZohocorp Manageengine Netflow Analyzer 12.7Zohocorp Manageengine Netflow AnalyzerZohocorp Manageengine Network Configuration Manager 12.7Zohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Opmanager Msp 12.7Zohocorp Manageengine Opmanager MspZohocorp Manageengine Opmanager Plus 12.7Zohocorp Manageengine Opmanager Plus
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook