Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine opmanager 12.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-38772
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Plus 12.6Zohocorp Manageengine Opmanager Plus 12.5
NA
CVE-2022-37024
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execut...
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Firewall Analyzer 12.5Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Firewall Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Msp 12.6Zohocorp Manageengine Opmanager Plus 12.5Zohocorp Manageengine Opmanager Plus 12.6
NA
CVE-2022-36923
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils prior to 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated malicious users to obtain a user's AP...
Zohocorp Manageengine Opmanager 12.5Zohocorp Manageengine Network Configuration Manager 12.5Zohocorp Manageengine Oputils 12.6Zohocorp Manageengine Oputils 12.5Zohocorp Manageengine Firewall Analyzer 12.5Zohocorp Manageengine Netflow Analyzer 12.5Zohocorp Manageengine Firewall Analyzer 12.6Zohocorp Manageengine Netflow Analyzer 12.6Zohocorp Manageengine Network Configuration Manager 12.6Zohocorp Manageengine Opmanager 12.6Zohocorp Manageengine Opmanager Msp 12.5Zohocorp Manageengine Opmanager Plus 12.6Zohocorp Manageengine Opmanager Plus 12.5Zohocorp Manageengine Opmanager Msp 12.6
445
VMScore
CVE-2020-12116
Zoho ManageEngine OpManager Stable build prior to 124196 and Released build prior to 125125 allows an unauthenticated malicious user to read arbitrary files on the server by sending a crafted request.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.4Zohocorp Manageengine Opmanager 12.5
578
VMScore
CVE-2022-27908
Zoho ManageEngine OpManager prior to 125588 (and prior to 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5
668
VMScore
CVE-2020-28653
Zoho ManageEngine OpManager Stable build prior to 125203 (and Released build prior to 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5
668
VMScore
CVE-2021-3287
Zoho ManageEngine OpManager prior to 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5
668
VMScore
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger prior to 125455 is vulnerable to SQL Injection in the Attacks Module API.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5
668
VMScore
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5
668
VMScore
CVE-2021-40493
Zoho ManageEngine OpManager prior to 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.
Zohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager 12.5
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook