zohocorp manageengine opmanager msp 12.6 vulnerabilities and exploits

(subscribe to this query)

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.

Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Zohocorp Manageengine Opmanager Plus 12.6 Zohocorp Manageengine Opmanager Plus Zohocorp Manageengine Opmanager Msp 12.6 Zohocorp Manageengine Opmanager Msp

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

Zohocorp Manageengine Opmanager 12.5 Zohocorp Manageengine Network Configuration Manager 12.5 Zohocorp Manageengine Netflow Analyzer 12.6 Zohocorp Manageengine Netflow Analyzer 12.5 Zohocorp Manageengine Network Configuration Manager 12.6 Zohocorp Manageengine Oputils 12.5 Zohocorp Manageengine Oputils 12.6 Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Msp 12.6 Zohocorp Manageengine Opmanager Msp 12.5 Zohocorp Manageengine Opmanager Plus 12.6 Zohocorp Manageengine Opmanager Plus 12.5

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils prior to 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated malicious users to obtain a user's AP...

Zohocorp Manageengine Opmanager 12.5 Zohocorp Manageengine Network Configuration Manager 12.5 Zohocorp Manageengine Oputils 12.6 Zohocorp Manageengine Oputils 12.5 Zohocorp Manageengine Firewall Analyzer 12.5 Zohocorp Manageengine Netflow Analyzer 12.5 Zohocorp Manageengine Firewall Analyzer 12.6 Zohocorp Manageengine Netflow Analyzer 12.6 Zohocorp Manageengine Network Configuration Manager 12.6 Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Msp 12.5 Zohocorp Manageengine Opmanager Plus 12.6 Zohocorp Manageengine Opmanager Plus 12.5 Zohocorp Manageengine Opmanager Msp 12.6

1 Github repository

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execut...

Zohocorp Manageengine Opmanager 12.5 Zohocorp Manageengine Network Configuration Manager 12.5 Zohocorp Manageengine Firewall Analyzer 12.5 Zohocorp Manageengine Netflow Analyzer 12.5 Zohocorp Manageengine Oputils 12.5 Zohocorp Manageengine Oputils 12.6 Zohocorp Manageengine Firewall Analyzer 12.6 Zohocorp Manageengine Netflow Analyzer 12.6 Zohocorp Manageengine Network Configuration Manager 12.6 Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Msp 12.5 Zohocorp Manageengine Opmanager Msp 12.6 Zohocorp Manageengine Opmanager Plus 12.5 Zohocorp Manageengine Opmanager Plus 12.6

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook