Vulnerabilities

TI-2023-25530 CVE-2023-47211 · GHSA-85h3-wq5q-6x6j

Path traversal in ManageEngine OpManager

HIGH 72

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.47024 Published 2024-01-08 No fix listed CWE-22

TI-2023-05614 CVE-2023-6105 · GHSA-2jvx-3h5f-w2j7

ManageEngine Information Disclosure in Multiple Products

LOW 26

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00694 Published 2023-11-15 Fixed in 14304, 7004 CWE-200

TI-2022-17138 CVE-2022-36923 · GHSA-hc4f-4mvr-7cv9

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…

MEDIUM 43

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07666 Published 2022-08-10 No fix listed CWE-284

TI-2022-17228 CVE-2022-37024 · GHSA-hm5j-w2qf-6392

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…

HIGH 78

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated user…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.79996 Published 2022-08-09 No fix listed

TI-2022-15980 CVE-2022-35404 · GHSA-vcmg-67gw-xr96

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are…

MEDIUM 41

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02943 Published 2022-07-18 No fix listed CWE-20

TI-2019-13010 CVE-2019-17421 · GHSA-xcv5-pjw7-mgp9

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine…

LOW 35

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting this file with a mal…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00554 Published 2019-11-21 No fix listed CWE-276

TI-2019-08742 CVE-2019-11678 · GHSA-gj8q-gfr7-53v7

The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build…

MEDIUM 54

The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0948 Published 2019-05-02 No fix listed CWE-89

TI-2019-08741 CVE-2019-11677 · GHSA-cww6-6g24-2wx4

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3…

MEDIUM 54

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09358 Published 2019-05-02 No fix listed CWE-611

TI-2019-08740 CVE-2019-11676 · GHSA-2h8j-vgqm-q655

The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224…

LOW 31

The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01929 Published 2019-05-02 No fix listed CWE-79

TI-2017-10286 CVE-2017-14123 · GHSA-2qmq-jv6c-rh53

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability…

MEDIUM 47

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06055 Published 2017-09-04 No fix listed CWE-434

TI-2015-06460 CVE-2015-7781 · GHSA-7xw4-gfx7-v62g

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

MEDIUM 43

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07097 Published 2017-06-27 No fix listed CWE-275

TI-2015-06459 CVE-2015-7780 · GHSA-4wq8-fwf6-xqwm

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.

MEDIUM 42

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.10631 Published 2017-06-27 No fix listed CWE-22

Vulnerabilities

Filters