Advisories · Technology
Zohocorp ManageEngine OpManager.
Every CVE that names Zohocorp ManageEngine OpManager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.9 CriticalCritical · CVSS 9+
Remote Code Execution vulnerability
- Zohocorp ManageEngine OpManager
- Command injection
- CVSS 8.8 High
Authentication Bypass vulnerability
- Zohocorp ManageEngine OpManager
- Authentication bypass
- CVSS 8.8 High
Command Injection vulnerability
- Zohocorp ManageEngine OpManager
- ZohoCorp ManageEngine Firewall Analyzer
- Command injection
- CVSS 7.7 High
XML Injection vulnerability
- Zohocorp ManageEngine OpManager
- ZohoCorp ManageEngine Firewall Analyzer
- Other injection
- CVSS 7.4 High
Data Exposure vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine Firewall Analyzer
- CWE-20
- CVSS 8.1 High
Privilege Escalation vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine Firewall Analyzer
- Privilege escalation
- CVSS 7.1 High
Broken Access Control vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine Firewall Analyzer
- Broken access control
- CVSS 7.1 High
Broken Access Control vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine Firewall Analyzer
- Broken access control
- CVSS 7.5 High
Path Traversal Vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine Network Configuration Manager
- CWE-428
- CVSS 8.8 High
SQL Injection vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine Firewall Analyzer
- SQL injection
- CVSS 7.6 High
Remote Code Execution Vulnerability
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine NetFlow Analyzer
- Code injection
- CVSS 4.6 Medium
Stored XSS
- Zohocorp ManageEngine OpManager
- Zohocorp ManageEngine NetFlow Analyzer
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Stored XSS
- Zohocorp ManageEngine OpManager
- Cross-site scripting (XSS)