Read the docs
TI-2023-25530 Aliases CVE-2023-47211GHSA-85h3-wq5q-6x6j

Path traversal in ManageEngine OpManager

Priority HIGH 72CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.47024 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ManageEngineOpManager12.7.258—No fix listedCNA
  • OpManager VendorManageEngine Affected 12.7.258 Fixed in — No fix listed CNA

CPE configurations NVD · 97

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127000:*:*:*:*:*:*12.7 build127000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127101:*:*:*:*:*:*12.7 build127101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127130:*:*:*:*:*:*12.7 build127130VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127131:*:*:*:*:*:*12.7 build127131VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127187:*:*:*:*:*:*12.7 build127187VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127244:*:*:*:*:*:*12.7 build127244VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127257:*:*:*:*:*:*12.7 build127257VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127000:*:*:*:*:*:* Versions 12.7 build127000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127101:*:*:*:*:*:* Versions 12.7 build127101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127130:*:*:*:*:*:* Versions 12.7 build127130 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127131:*:*:*:*:*:* Versions 12.7 build127131 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127187:*:*:*:*:*:* Versions 12.7 build127187 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127244:*:*:*:*:*:* Versions 12.7 build127244 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127257:*:*:*:*:*:* Versions 12.7 build127257 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
Show 87 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127000:*:*:*:*:*:*12.7 build127000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127003:*:*:*:*:*:*12.7 build127003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127101:*:*:*:*:*:*12.7 build127101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127130:*:*:*:*:*:*12.7 build127130VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127131:*:*:*:*:*:*12.7 build127131VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127187:*:*:*:*:*:*12.7 build127187VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127244:*:*:*:*:*:*12.7 build127244VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127255:*:*:*:*:*:*12.7 build127255VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127257:*:*:*:*:*:*12.7 build127257VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127000:*:*:*:*:*:*12.7 build127000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127102:*:*:*:*:*:*12.7 build127102VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127105:*:*:*:*:*:*12.7 build127105VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127132:*:*:*:*:*:*12.7 build127132VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127243:*:*:*:*:*:*12.7 build127243VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127257:*:*:*:*:*:*12.7 build127257VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127000:*:*:*:*:*:*12.7 build127000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127001:*:*:*:*:*:*12.7 build127001VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127002:*:*:*:*:*:*12.7 build127002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127003:*:*:*:*:*:*12.7 build127003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127004:*:*:*:*:*:*12.7 build127004VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127100:*:*:*:*:*:*12.7 build127100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127101:*:*:*:*:*:*12.7 build127101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127102:*:*:*:*:*:*12.7 build127102VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127103:*:*:*:*:*:*12.7 build127103VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127104:*:*:*:*:*:*12.7 build127104VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127109:*:*:*:*:*:*12.7 build127109VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127116:*:*:*:*:*:*12.7 build127116VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127117:*:*:*:*:*:*12.7 build127117VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127118:*:*:*:*:*:*12.7 build127118VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127119:*:*:*:*:*:*12.7 build127119VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127120:*:*:*:*:*:*12.7 build127120VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127122:*:*:*:*:*:*12.7 build127122VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127123:*:*:*:*:*:*12.7 build127123VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127131:*:*:*:*:*:*12.7 build127131VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127133:*:*:*:*:*:*12.7 build127133VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127134:*:*:*:*:*:*12.7 build127134VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127136:*:*:*:*:*:*12.7 build127136VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127138:*:*:*:*:*:*12.7 build127138VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127140:*:*:*:*:*:*12.7 build127140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127141:*:*:*:*:*:*12.7 build127141VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127185:*:*:*:*:*:*12.7 build127185VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127186:*:*:*:*:*:*12.7 build127186VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127187:*:*:*:*:*:*12.7 build127187VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127188:*:*:*:*:*:*12.7 build127188VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127189:*:*:*:*:*:*12.7 build127189VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127191:*:*:*:*:*:*12.7 build127191VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127240:*:*:*:*:*:*12.7 build127240VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127241:*:*:*:*:*:*12.7 build127241VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127242:*:*:*:*:*:*12.7 build127242VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127243:*:*:*:*:*:*12.7 build127243VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127255:*:*:*:*:*:*12.7 build127255VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127256:*:*:*:*:*:*12.7 build127256VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127257:*:*:*:*:*:*12.7 build127257VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127258:*:*:*:*:*:*12.7 build127258VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127109:*:*:*:*:*:*12.7 build127109VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127122:*:*:*:*:*:*12.7 build127122VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127123:*:*:*:*:*:*12.7 build127123VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127138:*:*:*:*:*:*12.7 build127138VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127139:*:*:*:*:*:*12.7 build127139VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127140:*:*:*:*:*:*12.7 build127140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127141:*:*:*:*:*:*12.7 build127141VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127142:*:*:*:*:*:*12.7 build127142VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127109:*:*:*:*:*:*12.7 build127109VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127122:*:*:*:*:*:*12.7 build127122VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127123:*:*:*:*:*:*12.7 build127123VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127138:*:*:*:*:*:*12.7 build127138VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127139:*:*:*:*:*:*12.7 build127139VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127140:*:*:*:*:*:*12.7 build127140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127141:*:*:*:*:*:*12.7 build127141VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127142:*:*:*:*:*:*12.7 build127142VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:*:*:*:*:*:*:*:*before 12.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127101:*:*:*:*:*:*12.7 build127101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127117:*:*:*:*:*:*12.7 build127117VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127134:*:*:*:*:*:*12.7 build127134VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127241:*:*:*:*:*:*12.7 build127241VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127242:*:*:*:*:*:*12.7 build127242VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127258:*:*:*:*:*:*12.7 build127258VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127259:*:*:*:*:*:*12.7 build127259VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127000:*:*:*:*:*:* Versions 12.7 build127000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127003:*:*:*:*:*:* Versions 12.7 build127003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127101:*:*:*:*:*:* Versions 12.7 build127101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127130:*:*:*:*:*:* Versions 12.7 build127130 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127131:*:*:*:*:*:* Versions 12.7 build127131 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127187:*:*:*:*:*:* Versions 12.7 build127187 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127244:*:*:*:*:*:* Versions 12.7 build127244 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127255:*:*:*:*:*:* Versions 12.7 build127255 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127257:*:*:*:*:*:* Versions 12.7 build127257 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127000:*:*:*:*:*:* Versions 12.7 build127000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127102:*:*:*:*:*:* Versions 12.7 build127102 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127105:*:*:*:*:*:* Versions 12.7 build127105 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127132:*:*:*:*:*:* Versions 12.7 build127132 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127243:*:*:*:*:*:* Versions 12.7 build127243 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127257:*:*:*:*:*:* Versions 12.7 build127257 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127000:*:*:*:*:*:* Versions 12.7 build127000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127001:*:*:*:*:*:* Versions 12.7 build127001 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127002:*:*:*:*:*:* Versions 12.7 build127002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127003:*:*:*:*:*:* Versions 12.7 build127003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127004:*:*:*:*:*:* Versions 12.7 build127004 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127100:*:*:*:*:*:* Versions 12.7 build127100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127101:*:*:*:*:*:* Versions 12.7 build127101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127102:*:*:*:*:*:* Versions 12.7 build127102 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127103:*:*:*:*:*:* Versions 12.7 build127103 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127104:*:*:*:*:*:* Versions 12.7 build127104 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127109:*:*:*:*:*:* Versions 12.7 build127109 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127116:*:*:*:*:*:* Versions 12.7 build127116 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127117:*:*:*:*:*:* Versions 12.7 build127117 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127118:*:*:*:*:*:* Versions 12.7 build127118 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127119:*:*:*:*:*:* Versions 12.7 build127119 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127120:*:*:*:*:*:* Versions 12.7 build127120 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127122:*:*:*:*:*:* Versions 12.7 build127122 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127123:*:*:*:*:*:* Versions 12.7 build127123 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127131:*:*:*:*:*:* Versions 12.7 build127131 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127133:*:*:*:*:*:* Versions 12.7 build127133 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127134:*:*:*:*:*:* Versions 12.7 build127134 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127136:*:*:*:*:*:* Versions 12.7 build127136 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127138:*:*:*:*:*:* Versions 12.7 build127138 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127140:*:*:*:*:*:* Versions 12.7 build127140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127141:*:*:*:*:*:* Versions 12.7 build127141 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127185:*:*:*:*:*:* Versions 12.7 build127185 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127186:*:*:*:*:*:* Versions 12.7 build127186 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127187:*:*:*:*:*:* Versions 12.7 build127187 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127188:*:*:*:*:*:* Versions 12.7 build127188 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127189:*:*:*:*:*:* Versions 12.7 build127189 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127191:*:*:*:*:*:* Versions 12.7 build127191 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127240:*:*:*:*:*:* Versions 12.7 build127240 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127241:*:*:*:*:*:* Versions 12.7 build127241 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127242:*:*:*:*:*:* Versions 12.7 build127242 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127243:*:*:*:*:*:* Versions 12.7 build127243 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127255:*:*:*:*:*:* Versions 12.7 build127255 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127256:*:*:*:*:*:* Versions 12.7 build127256 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127257:*:*:*:*:*:* Versions 12.7 build127257 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127258:*:*:*:*:*:* Versions 12.7 build127258 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127109:*:*:*:*:*:* Versions 12.7 build127109 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127122:*:*:*:*:*:* Versions 12.7 build127122 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127123:*:*:*:*:*:* Versions 12.7 build127123 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127138:*:*:*:*:*:* Versions 12.7 build127138 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127139:*:*:*:*:*:* Versions 12.7 build127139 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127140:*:*:*:*:*:* Versions 12.7 build127140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127141:*:*:*:*:*:* Versions 12.7 build127141 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127142:*:*:*:*:*:* Versions 12.7 build127142 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127109:*:*:*:*:*:* Versions 12.7 build127109 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127122:*:*:*:*:*:* Versions 12.7 build127122 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127123:*:*:*:*:*:* Versions 12.7 build127123 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127138:*:*:*:*:*:* Versions 12.7 build127138 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127139:*:*:*:*:*:* Versions 12.7 build127139 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127140:*:*:*:*:*:* Versions 12.7 build127140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127141:*:*:*:*:*:* Versions 12.7 build127141 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127142:*:*:*:*:*:* Versions 12.7 build127142 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:*:*:*:*:*:*:*:* Versions before 12.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127101:*:*:*:*:*:* Versions 12.7 build127101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127117:*:*:*:*:*:* Versions 12.7 build127117 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127134:*:*:*:*:*:* Versions 12.7 build127134 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127241:*:*:*:*:*:* Versions 12.7 build127241 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127242:*:*:*:*:*:* Versions 12.7 build127242 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127258:*:*:*:*:*:* Versions 12.7 build127258 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_oputils:12.7:build127259:*:*:*:*:*:* Versions 12.7 build127259 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-47211
  2. 2026-10-03 Alias added: GHSA-85h3-wq5q-6x6j

References

Exploit 1

Advisory 1

  • TI-2015-06796 The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows… CVSS 3.0CRITICAL 9.8
  • TI-2014-04325 Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer… CVSS 3.0HIGH 8.8
  • TI-2017-08514 Path traversal in Zoho ManageEngine ServiceDesk CVSS 3.0HIGH 7.5
  • TI-2025-03383 SQL injection in ManageEngine ADSelfService Plus CVSS 3.1HIGH 8.1
  • TI-2025-24864 SQL injection in ManageEngine ADAudit Plus CVSS 3.1HIGH 8.3
  • TI-2016-07764 ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects CVSS 3.0CRITICAL 9.8
See all 131 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences