Read the docs
TI-2018-14295 Aliases CVE-2018-20173GHSA-mfq7-6cvc-529c

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.

Priority MEDIUM 63CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.

Why it matters now

EPSS 0.24498 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 89

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build12300:*:*:*:*:*:*12.3 build12300VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123001:*:*:*:*:*:*12.3 build123001VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123002:*:*:*:*:*:*12.3 build123002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123003:*:*:*:*:*:*12.3 build123003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123004:*:*:*:*:*:*12.3 build123004VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123005:*:*:*:*:*:*12.3 build123005VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123006:*:*:*:*:*:*12.3 build123006VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123007:*:*:*:*:*:*12.3 build123007VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123008:*:*:*:*:*:*12.3 build123008VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123009:*:*:*:*:*:*12.3 build123009VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build12300:*:*:*:*:*:* Versions 12.3 build12300 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123001:*:*:*:*:*:* Versions 12.3 build123001 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123002:*:*:*:*:*:* Versions 12.3 build123002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123003:*:*:*:*:*:* Versions 12.3 build123003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123004:*:*:*:*:*:* Versions 12.3 build123004 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123005:*:*:*:*:*:* Versions 12.3 build123005 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123006:*:*:*:*:*:* Versions 12.3 build123006 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123007:*:*:*:*:*:* Versions 12.3 build123007 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123008:*:*:*:*:*:* Versions 12.3 build123008 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123009:*:*:*:*:*:* Versions 12.3 build123009 Vulnerable ·Zohocorp
Show 79 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123010:*:*:*:*:*:*12.3 build123010VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123011:*:*:*:*:*:*12.3 build123011VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123012:*:*:*:*:*:*12.3 build123012VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123013:*:*:*:*:*:*12.3 build123013VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123014:*:*:*:*:*:*12.3 build123014VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123015:*:*:*:*:*:*12.3 build123015VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123021:*:*:*:*:*:*12.3 build123021VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123022:*:*:*:*:*:*12.3 build123022VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123023:*:*:*:*:*:*12.3 build123023VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123024:*:*:*:*:*:*12.3 build123024VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123025:*:*:*:*:*:*12.3 build123025VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123026:*:*:*:*:*:*12.3 build123026VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123027:*:*:*:*:*:*12.3 build123027VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123028:*:*:*:*:*:*12.3 build123028VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123029:*:*:*:*:*:*12.3 build123029VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123030:*:*:*:*:*:*12.3 build123030VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123031:*:*:*:*:*:*12.3 build123031VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123032:*:*:*:*:*:*12.3 build123032VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123033:*:*:*:*:*:*12.3 build123033VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123034:*:*:*:*:*:*12.3 build123034VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123035:*:*:*:*:*:*12.3 build123035VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123036:*:*:*:*:*:*12.3 build123036VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123037:*:*:*:*:*:*12.3 build123037VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123043:*:*:*:*:*:*12.3 build123043VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123044:*:*:*:*:*:*12.3 build123044VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123045:*:*:*:*:*:*12.3 build123045VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123046:*:*:*:*:*:*12.3 build123046VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123047:*:*:*:*:*:*12.3 build123047VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123048:*:*:*:*:*:*12.3 build123048VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123049:*:*:*:*:*:*12.3 build123049VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123050:*:*:*:*:*:*12.3 build123050VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123051:*:*:*:*:*:*12.3 build123051VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123052:*:*:*:*:*:*12.3 build123052VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123053:*:*:*:*:*:*12.3 build123053VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123054:*:*:*:*:*:*12.3 build123054VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123055:*:*:*:*:*:*12.3 build123055VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123056:*:*:*:*:*:*12.3 build123056VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123057:*:*:*:*:*:*12.3 build123057VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123062:*:*:*:*:*:*12.3 build123062VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123063:*:*:*:*:*:*12.3 build123063VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123064:*:*:*:*:*:*12.3 build123064VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123065:*:*:*:*:*:*12.3 build123065VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123066:*:*:*:*:*:*12.3 build123066VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123067:*:*:*:*:*:*12.3 build123067VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123068:*:*:*:*:*:*12.3 build123068VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123069:*:*:*:*:*:*12.3 build123069VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123070:*:*:*:*:*:*12.3 build123070VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123076:*:*:*:*:*:*12.3 build123076VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123077:*:*:*:*:*:*12.3 build123077VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123078:*:*:*:*:*:*12.3 build123078VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123079:*:*:*:*:*:*12.3 build123079VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123080:*:*:*:*:*:*12.3 build123080VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123081:*:*:*:*:*:*12.3 build123081VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123082:*:*:*:*:*:*12.3 build123082VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123083:*:*:*:*:*:*12.3 build123083VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123084:*:*:*:*:*:*12.3 build123084VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123086:*:*:*:*:*:*12.3 build123086VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123090:*:*:*:*:*:*12.3 build123090VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123091:*:*:*:*:*:*12.3 build123091VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123092:*:*:*:*:*:*12.3 build123092VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123192:*:*:*:*:*:*12.3 build123192VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123193:*:*:*:*:*:*12.3 build123193VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123194:*:*:*:*:*:*12.3 build123194VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123195:*:*:*:*:*:*12.3 build123195VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123196:*:*:*:*:*:*12.3 build123196VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123197:*:*:*:*:*:*12.3 build123197VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123198:*:*:*:*:*:*12.3 build123198VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123204:*:*:*:*:*:*12.3 build123204VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123205:*:*:*:*:*:*12.3 build123205VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123206:*:*:*:*:*:*12.3 build123206VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123207:*:*:*:*:*:*12.3 build123207VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123208:*:*:*:*:*:*12.3 build123208VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123222:*:*:*:*:*:*12.3 build123222VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123223:*:*:*:*:*:*12.3 build123223VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123224:*:*:*:*:*:*12.3 build123224VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123229:*:*:*:*:*:*12.3 build123229VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123230:*:*:*:*:*:*12.3 build123230VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123231:*:*:*:*:*:*12.3 build123231VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123237:*:*:*:*:*:*12.3 build123237VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123010:*:*:*:*:*:* Versions 12.3 build123010 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123011:*:*:*:*:*:* Versions 12.3 build123011 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123012:*:*:*:*:*:* Versions 12.3 build123012 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123013:*:*:*:*:*:* Versions 12.3 build123013 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123014:*:*:*:*:*:* Versions 12.3 build123014 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123015:*:*:*:*:*:* Versions 12.3 build123015 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123021:*:*:*:*:*:* Versions 12.3 build123021 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123022:*:*:*:*:*:* Versions 12.3 build123022 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123023:*:*:*:*:*:* Versions 12.3 build123023 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123024:*:*:*:*:*:* Versions 12.3 build123024 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123025:*:*:*:*:*:* Versions 12.3 build123025 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123026:*:*:*:*:*:* Versions 12.3 build123026 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123027:*:*:*:*:*:* Versions 12.3 build123027 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123028:*:*:*:*:*:* Versions 12.3 build123028 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123029:*:*:*:*:*:* Versions 12.3 build123029 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123030:*:*:*:*:*:* Versions 12.3 build123030 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123031:*:*:*:*:*:* Versions 12.3 build123031 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123032:*:*:*:*:*:* Versions 12.3 build123032 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123033:*:*:*:*:*:* Versions 12.3 build123033 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123034:*:*:*:*:*:* Versions 12.3 build123034 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123035:*:*:*:*:*:* Versions 12.3 build123035 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123036:*:*:*:*:*:* Versions 12.3 build123036 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123037:*:*:*:*:*:* Versions 12.3 build123037 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123043:*:*:*:*:*:* Versions 12.3 build123043 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123044:*:*:*:*:*:* Versions 12.3 build123044 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123045:*:*:*:*:*:* Versions 12.3 build123045 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123046:*:*:*:*:*:* Versions 12.3 build123046 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123047:*:*:*:*:*:* Versions 12.3 build123047 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123048:*:*:*:*:*:* Versions 12.3 build123048 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123049:*:*:*:*:*:* Versions 12.3 build123049 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123050:*:*:*:*:*:* Versions 12.3 build123050 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123051:*:*:*:*:*:* Versions 12.3 build123051 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123052:*:*:*:*:*:* Versions 12.3 build123052 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123053:*:*:*:*:*:* Versions 12.3 build123053 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123054:*:*:*:*:*:* Versions 12.3 build123054 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123055:*:*:*:*:*:* Versions 12.3 build123055 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123056:*:*:*:*:*:* Versions 12.3 build123056 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123057:*:*:*:*:*:* Versions 12.3 build123057 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123062:*:*:*:*:*:* Versions 12.3 build123062 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123063:*:*:*:*:*:* Versions 12.3 build123063 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123064:*:*:*:*:*:* Versions 12.3 build123064 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123065:*:*:*:*:*:* Versions 12.3 build123065 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123066:*:*:*:*:*:* Versions 12.3 build123066 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123067:*:*:*:*:*:* Versions 12.3 build123067 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123068:*:*:*:*:*:* Versions 12.3 build123068 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123069:*:*:*:*:*:* Versions 12.3 build123069 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123070:*:*:*:*:*:* Versions 12.3 build123070 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123076:*:*:*:*:*:* Versions 12.3 build123076 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123077:*:*:*:*:*:* Versions 12.3 build123077 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123078:*:*:*:*:*:* Versions 12.3 build123078 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123079:*:*:*:*:*:* Versions 12.3 build123079 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123080:*:*:*:*:*:* Versions 12.3 build123080 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123081:*:*:*:*:*:* Versions 12.3 build123081 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123082:*:*:*:*:*:* Versions 12.3 build123082 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123083:*:*:*:*:*:* Versions 12.3 build123083 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123084:*:*:*:*:*:* Versions 12.3 build123084 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123086:*:*:*:*:*:* Versions 12.3 build123086 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123090:*:*:*:*:*:* Versions 12.3 build123090 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123091:*:*:*:*:*:* Versions 12.3 build123091 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123092:*:*:*:*:*:* Versions 12.3 build123092 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123192:*:*:*:*:*:* Versions 12.3 build123192 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123193:*:*:*:*:*:* Versions 12.3 build123193 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123194:*:*:*:*:*:* Versions 12.3 build123194 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123195:*:*:*:*:*:* Versions 12.3 build123195 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123196:*:*:*:*:*:* Versions 12.3 build123196 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123197:*:*:*:*:*:* Versions 12.3 build123197 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123198:*:*:*:*:*:* Versions 12.3 build123198 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123204:*:*:*:*:*:* Versions 12.3 build123204 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123205:*:*:*:*:*:* Versions 12.3 build123205 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123206:*:*:*:*:*:* Versions 12.3 build123206 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123207:*:*:*:*:*:* Versions 12.3 build123207 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123208:*:*:*:*:*:* Versions 12.3 build123208 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123222:*:*:*:*:*:* Versions 12.3 build123222 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123223:*:*:*:*:*:* Versions 12.3 build123223 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123224:*:*:*:*:*:* Versions 12.3 build123224 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123229:*:*:*:*:*:* Versions 12.3 build123229 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123230:*:*:*:*:*:* Versions 12.3 build123230 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123231:*:*:*:*:*:* Versions 12.3 build123231 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123237:*:*:*:*:*:* Versions 12.3 build123237 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-20173
  2. 2026-10-03 Alias added: GHSA-mfq7-6cvc-529c

References

Advisory 1

  • TI-2022-11994 Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports. CVSS 3.1CRITICAL 9.8
  • TI-2021-18117 Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API. CVSS 3.1CRITICAL 9.8
  • TI-2020-17379 Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233)… CVSS 3.1CRITICAL 9.8
  • TI-2019-13137 An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. CVSS 3.1CRITICAL 9.8
  • TI-2023-14824 Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote… CVSS 3.1HIGH 8.8
  • TI-2018-12325 Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection. CVSS 3.0CRITICAL 9.8
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences