Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote…
Priority HIGH 81Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.81555 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 69
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:* | before 12.6 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126000:*:*:*:*:*:* | 12.6 build126000 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126001:*:*:*:*:*:* | 12.6 build126001 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126002:*:*:*:*:*:* | 12.6 build126002 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126004:*:*:*:*:*:* | 12.6 build126004 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126005:*:*:*:*:*:* | 12.6 build126005 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126100:*:*:*:*:*:* | 12.6 build126100 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126101:*:*:*:*:*:* | 12.6 build126101 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126102:*:*:*:*:*:* | 12.6 build126102 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126103:*:*:*:*:*:* | 12.6 build126103 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:* Versions before 12.6 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126000:*:*:*:*:*:* Versions 12.6 build126000 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126001:*:*:*:*:*:* Versions 12.6 build126001 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126002:*:*:*:*:*:* Versions 12.6 build126002 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126004:*:*:*:*:*:* Versions 12.6 build126004 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126005:*:*:*:*:*:* Versions 12.6 build126005 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126100:*:*:*:*:*:* Versions 12.6 build126100 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126101:*:*:*:*:*:* Versions 12.6 build126101 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126102:*:*:*:*:*:* Versions 12.6 build126102 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126103:*:*:*:*:*:* Versions 12.6 build126103 Vulnerable ·Zohocorp
Show 59 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126104:*:*:*:*:*:* | 12.6 build126104 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126107:*:*:*:*:*:* | 12.6 build126107 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126108:*:*:*:*:*:* | 12.6 build126108 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126109:*:*:*:*:*:* | 12.6 build126109 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126110:*:*:*:*:*:* | 12.6 build126110 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126113:*:*:*:*:*:* | 12.6 build126113 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126114:*:*:*:*:*:* | 12.6 build126114 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126115:*:*:*:*:*:* | 12.6 build126115 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126116:*:*:*:*:*:* | 12.6 build126116 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126117:*:*:*:*:*:* | 12.6 build126117 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126118:*:*:*:*:*:* | 12.6 build126118 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126119:*:*:*:*:*:* | 12.6 build126119 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126120:*:*:*:*:*:* | 12.6 build126120 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126121:*:*:*:*:*:* | 12.6 build126121 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126122:*:*:*:*:*:* | 12.6 build126122 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126130:*:*:*:*:*:* | 12.6 build126130 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126131:*:*:*:*:*:* | 12.6 build126131 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126132:*:*:*:*:*:* | 12.6 build126132 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126134:*:*:*:*:*:* | 12.6 build126134 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126135:*:*:*:*:*:* | 12.6 build126135 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126136:*:*:*:*:*:* | 12.6 build126136 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126139:*:*:*:*:*:* | 12.6 build126139 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126141:*:*:*:*:*:* | 12.6 build126141 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126147:*:*:*:*:*:* | 12.6 build126147 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126148:*:*:*:*:*:* | 12.6 build126148 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126149:*:*:*:*:*:* | 12.6 build126149 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126150:*:*:*:*:*:* | 12.6 build126150 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126151:*:*:*:*:*:* | 12.6 build126151 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126154:*:*:*:*:*:* | 12.6 build126154 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126155:*:*:*:*:*:* | 12.6 build126155 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126162:*:*:*:*:*:* | 12.6 build126162 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126163:*:*:*:*:*:* | 12.6 build126163 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126164:*:*:*:*:*:* | 12.6 build126164 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126165:*:*:*:*:*:* | 12.6 build126165 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126166:*:*:*:*:*:* | 12.6 build126166 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126167:*:*:*:*:*:* | 12.6 build126167 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126168:*:*:*:*:*:* | 12.6 build126168 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126169:*:*:*:*:*:* | 12.6 build126169 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126262:*:*:*:*:*:* | 12.6 build126262 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126264:*:*:*:*:*:* | 12.6 build126264 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126275:*:*:*:*:*:* | 12.6 build126275 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126276:*:*:*:*:*:* | 12.6 build126276 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126277:*:*:*:*:*:* | 12.6 build126277 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126278:*:*:*:*:*:* | 12.6 build126278 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126279:*:*:*:*:*:* | 12.6 build126279 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126280:*:*:*:*:*:* | 12.6 build126280 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126283:*:*:*:*:*:* | 12.6 build126283 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126284:*:*:*:*:*:* | 12.6 build126284 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126285:*:*:*:*:*:* | 12.6 build126285 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126290:*:*:*:*:*:* | 12.6 build126290 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126293:*:*:*:*:*:* | 12.6 build126293 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126294:*:*:*:*:*:* | 12.6 build126294 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126295:*:*:*:*:*:* | 12.6 build126295 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126306:*:*:*:*:*:* | 12.6 build126306 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126308:*:*:*:*:*:* | 12.6 build126308 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126310:*:*:*:*:*:* | 12.6 build126310 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126311:*:*:*:*:*:* | 12.6 build126311 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126322:*:*:*:*:*:* | 12.6 build126322 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126323:*:*:*:*:*:* | 12.6 build126323 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126104:*:*:*:*:*:* Versions 12.6 build126104 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126107:*:*:*:*:*:* Versions 12.6 build126107 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126108:*:*:*:*:*:* Versions 12.6 build126108 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126109:*:*:*:*:*:* Versions 12.6 build126109 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126110:*:*:*:*:*:* Versions 12.6 build126110 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126113:*:*:*:*:*:* Versions 12.6 build126113 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126114:*:*:*:*:*:* Versions 12.6 build126114 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126115:*:*:*:*:*:* Versions 12.6 build126115 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126116:*:*:*:*:*:* Versions 12.6 build126116 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126117:*:*:*:*:*:* Versions 12.6 build126117 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126118:*:*:*:*:*:* Versions 12.6 build126118 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126119:*:*:*:*:*:* Versions 12.6 build126119 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126120:*:*:*:*:*:* Versions 12.6 build126120 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126121:*:*:*:*:*:* Versions 12.6 build126121 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126122:*:*:*:*:*:* Versions 12.6 build126122 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126130:*:*:*:*:*:* Versions 12.6 build126130 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126131:*:*:*:*:*:* Versions 12.6 build126131 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126132:*:*:*:*:*:* Versions 12.6 build126132 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126134:*:*:*:*:*:* Versions 12.6 build126134 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126135:*:*:*:*:*:* Versions 12.6 build126135 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126136:*:*:*:*:*:* Versions 12.6 build126136 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126139:*:*:*:*:*:* Versions 12.6 build126139 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126141:*:*:*:*:*:* Versions 12.6 build126141 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126147:*:*:*:*:*:* Versions 12.6 build126147 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126148:*:*:*:*:*:* Versions 12.6 build126148 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126149:*:*:*:*:*:* Versions 12.6 build126149 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126150:*:*:*:*:*:* Versions 12.6 build126150 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126151:*:*:*:*:*:* Versions 12.6 build126151 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126154:*:*:*:*:*:* Versions 12.6 build126154 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126155:*:*:*:*:*:* Versions 12.6 build126155 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126162:*:*:*:*:*:* Versions 12.6 build126162 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126163:*:*:*:*:*:* Versions 12.6 build126163 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126164:*:*:*:*:*:* Versions 12.6 build126164 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126165:*:*:*:*:*:* Versions 12.6 build126165 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126166:*:*:*:*:*:* Versions 12.6 build126166 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126167:*:*:*:*:*:* Versions 12.6 build126167 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126168:*:*:*:*:*:* Versions 12.6 build126168 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126169:*:*:*:*:*:* Versions 12.6 build126169 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126262:*:*:*:*:*:* Versions 12.6 build126262 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126264:*:*:*:*:*:* Versions 12.6 build126264 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126275:*:*:*:*:*:* Versions 12.6 build126275 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126276:*:*:*:*:*:* Versions 12.6 build126276 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126277:*:*:*:*:*:* Versions 12.6 build126277 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126278:*:*:*:*:*:* Versions 12.6 build126278 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126279:*:*:*:*:*:* Versions 12.6 build126279 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126280:*:*:*:*:*:* Versions 12.6 build126280 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126283:*:*:*:*:*:* Versions 12.6 build126283 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126284:*:*:*:*:*:* Versions 12.6 build126284 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126285:*:*:*:*:*:* Versions 12.6 build126285 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126290:*:*:*:*:*:* Versions 12.6 build126290 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126293:*:*:*:*:*:* Versions 12.6 build126293 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126294:*:*:*:*:*:* Versions 12.6 build126294 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126295:*:*:*:*:*:* Versions 12.6 build126295 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126306:*:*:*:*:*:* Versions 12.6 build126306 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126308:*:*:*:*:*:* Versions 12.6 build126308 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126310:*:*:*:*:*:* Versions 12.6 build126310 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126311:*:*:*:*:*:* Versions 12.6 build126311 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126322:*:*:*:*:*:* Versions 12.6 build126322 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_opmanager:12.6:build126323:*:*:*:*:*:* Versions 12.6 build126323 Vulnerable ·Zohocorp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-31099
- 2026-10-03 Alias added: GHSA-2fm4-723x-jv9m
References
More Zohocorp Manageengine Opmanager vulnerabilities
- TI-2022-11994 Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports. CVSS 3.1CRITICAL 9.8
- TI-2021-18117 Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API. CVSS 3.1CRITICAL 9.8
- TI-2020-17379 Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233)… CVSS 3.1CRITICAL 9.8
- TI-2019-13137 An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. CVSS 3.1CRITICAL 9.8
- TI-2018-12325 Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection. CVSS 3.0CRITICAL 9.8
- TI-2015-06446 PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote… CVSS 2.0HIGH 9.0
Sources
- CVE-2023-31099 · CVE Program
- CVE-2023-31099 · NVD
- FIRST EPSS
- GHSA-2fm4-723x-jv9m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences