zohocorp manageengine oputils - vulnerabilities and exploits

(subscribe to this query)

A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote m...

Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -

Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows malicious u...

Zohocorp Manageengine Netflow Analyzer -Zohocorp Firewall Analyzer -Zohocorp Manageengine Opmanager -Zohocorp Manageengine Oputils -Zohocorp Manageengine Network Configuration Manager -

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

Zohocorp Manageengine Opmanager 12.5 Zohocorp Manageengine Network Configuration Manager 12.5 Zohocorp Manageengine Netflow Analyzer 12.6 Zohocorp Manageengine Netflow Analyzer 12.5 Zohocorp Manageengine Network Configuration Manager 12.6 Zohocorp Manageengine Oputils 12.5 Zohocorp Manageengine Oputils 12.6 Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Msp 12.6 Zohocorp Manageengine Opmanager Msp 12.5 Zohocorp Manageengine Opmanager Plus 12.6 Zohocorp Manageengine Opmanager Plus 12.5

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

Zohocorp Manageengine Opmanager Zohocorp Manageengine Opmanager 12.7 Zohocorp Manageengine Oputils Zohocorp Manageengine Oputils 12.7 Zohocorp Manageengine Firewall Analyzer 12.7 Zohocorp Manageengine Firewall Analyzer Zohocorp Manageengine Netflow Analyzer 12.7 Zohocorp Manageengine Netflow Analyzer Zohocorp Manageengine Network Configuration Manager 12.7 Zohocorp Manageengine Network Configuration Manager Zohocorp Manageengine Opmanager Msp 12.7 Zohocorp Manageengine Opmanager Msp Zohocorp Manageengine Opmanager Plus 12.7 Zohocorp Manageengine Opmanager Plus

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils prior to 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated malicious users to obtain a user's AP...

Zohocorp Manageengine Opmanager 12.5 Zohocorp Manageengine Network Configuration Manager 12.5 Zohocorp Manageengine Oputils 12.6 Zohocorp Manageengine Oputils 12.5 Zohocorp Manageengine Firewall Analyzer 12.5 Zohocorp Manageengine Netflow Analyzer 12.5 Zohocorp Manageengine Firewall Analyzer 12.6 Zohocorp Manageengine Netflow Analyzer 12.6 Zohocorp Manageengine Network Configuration Manager 12.6 Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Msp 12.5 Zohocorp Manageengine Opmanager Plus 12.6 Zohocorp Manageengine Opmanager Plus 12.5 Zohocorp Manageengine Opmanager Msp 12.6

1 Github repository

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils prior to 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execut...

Zohocorp Manageengine Opmanager 12.5 Zohocorp Manageengine Network Configuration Manager 12.5 Zohocorp Manageengine Firewall Analyzer 12.5 Zohocorp Manageengine Netflow Analyzer 12.5 Zohocorp Manageengine Oputils 12.5 Zohocorp Manageengine Oputils 12.6 Zohocorp Manageengine Firewall Analyzer 12.6 Zohocorp Manageengine Netflow Analyzer 12.6 Zohocorp Manageengine Network Configuration Manager 12.6 Zohocorp Manageengine Opmanager 12.6 Zohocorp Manageengine Opmanager Msp 12.5 Zohocorp Manageengine Opmanager Msp 12.6 Zohocorp Manageengine Opmanager Plus 12.5 Zohocorp Manageengine Opmanager Plus 12.6

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associated with said products try to execute binaries such as sc.exe from the current di...

Zohocorp Manageengine Mobile Device Manager Plus 9.0.0 Zohocorp Manageengine Patch Connect Plus 9.0.0 Zohocorp Manageengine Vulnerability Manager Plus 9.0.0 Zohocorp Manageengine Patch Manager Plus 9.0.0 Zohocorp Manageengine Browser Security Plus -Zohocorp Manageengine Eventlog Analyzer 12.0.2 Zohocorp Manageengine Supportcenter Plus 8.1 Zohocorp Manageengine Opmanager 12.3 Zohocorp Manageengine Oputils 11.0 Zohocorp Manageengine Desktop Central 10.0.380 Zohocorp Manageengine Firewall 12.0 Zohocorp Manageengine Key Manager Plus 5.6 Zohocorp Manageengine Password Manager Pro 9.9 Zohocorp Manageengine Analytics Plus 1.0 Zohocorp Manageengine Servicedesk Plus 10.0.0 Zohocorp Manageengine O365 Manager Plus 4.0 Zohocorp Manageengine Netflow Analyzer 11.0 Zohocorp Manageengine Network Configuration Manager 11.0

OpUtils in Zoho ManageEngine OpManager 12.5 prior to 125490 mishandles authentication for a few audit directories.

Zohocorp Manageengine Opmanager 12.5

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook