Advisories · Technology

ManageEngine OpManager.

Every CVE that names ManageEngine OpManager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-41437 CVE record

CVSS 4.3 Medium

Reflected XSS
- ManageEngine OpManager
- Cross-site scripting (XSS)
Not analysed yet 9 Jun 2025
CVE-2024-6748 CVE record

CVSS 8.3 HighCritical · CVSS 7+ and EPSS

SQL Injection
- ManageEngine OpManager
- SQL injection
Not analysed yet 29 Jul 2024
CVE-2024-36038 CVE record

CVSS 6.3 Medium

Stored XSS
- ManageEngine OpManager
- Cross-site scripting (XSS)
Not analysed yet 24 Jun 2024
CVE-2023-47211 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Path traversal in ManageEngine OpManager
- ManageEngine OpManager
- Path traversal
Not analysed yet 8 Jan 2024
CVE-2022-43473 CVE record

CVSS 5.8 Medium

XML external entity injection in ManageEngine OpManager
- ManageEngine OpManager
- XML external entities (XXE)
Not analysed yet 30 Mar 2023