TI-2023-25530 CVE-2023-47211 · GHSA-85h3-wq5q-6x6j
Path traversal in ManageEngine OpManager
Priority HIGH 72
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.
Vulnerabilities
28 records
TI-2023-05614 CVE-2023-6105 · GHSA-2jvx-3h5f-w2j7
ManageEngine Information Disclosure in Multiple Products
Priority LOW 26
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.
TI-2022-18277 CVE-2022-38772 · GHSA-qhfj-p2m5-p6pg
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…
Priority HIGH 78
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that l…
TI-2022-17138 CVE-2022-36923 · GHSA-hc4f-4mvr-7cv9
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…
Priority MEDIUM 43
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow…
TI-2022-17228 CVE-2022-37024 · GHSA-hm5j-w2qf-6392
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration…
Priority HIGH 78
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated user…
TI-2022-15980 CVE-2022-35404 · GHSA-vcmg-67gw-xr96
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are…
Priority MEDIUM 41
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
TI-2019-09057 CVE-2019-12133 · GHSA-69r6-frgh-wc7c
Multiple Zoho ManageEngine products suffer from local privilege escalation due to…
Priority LOW 38
Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders.
TI-2019-09107 CVE-2019-12196 · GHSA-33ff-q632-5gfm
A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho…
Priority HIGH 79
A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter.
TI-2019-06442 CVE-2019-8929 · GHSA-w7r4-qhwx-w666
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
Priority MEDIUM 40
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
TI-2019-06441 CVE-2019-8928 · GHSA-73h6-jqm3-v68r
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
Priority LOW 36
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
TI-2019-06440 CVE-2019-8927 · GHSA-hcm6-7qq9-x3j3
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
Priority LOW 36
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
TI-2019-06439 CVE-2019-8926 · GHSA-hp27-jxv4-4cfp
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
Priority LOW 36
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
TI-2019-06438 CVE-2019-8925 · GHSA-894v-rfxj-998f
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
Priority LOW 34
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.
TI-2019-05288 CVE-2019-7427 · GHSA-qgjq-259r-gp4m
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the…
Priority LOW 32
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.
TI-2019-05287 CVE-2019-7426 · GHSA-mp9w-hhmf-v5pj
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the…
Priority LOW 32
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter.
TI-2019-05286 CVE-2019-7425 · GHSA-p79x-xf7r-phxj
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the…
Priority LOW 32
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter.
TI-2019-05285 CVE-2019-7424 · GHSA-42pm-gg43-38gr
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the…
Priority LOW 32
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot,…
TI-2019-05284 CVE-2019-7423 · GHSA-qw7r-jh4c-hgfq
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the…
Priority LOW 32
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter.
TI-2019-05283 CVE-2019-7422 · GHSA-g5j4-fpcq-g7jq
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the…
Priority LOW 32
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.
TI-2018-09328 CVE-2018-12998 · GHSA-2pw8-r6j9-6vm6
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow…
Priority HIGH 72
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 12316…
TI-2018-09327 CVE-2018-12997 · GHSA-658p-hh5r-7qvp
Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer…
Priority MEDIUM 42
Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161,…
TI-2018-07634 CVE-2018-10803 · GHSA-jwv4-w94q-2w62
Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho…
Priority LOW 28
Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (build 123125) allows remote attackers to inject arbitrary web script or HTML via…
TI-2015-03707 CVE-2015-4418 · GHSA-hhp4-hvm2-m2w3
Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute…
Priority LOW 28
Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
TI-2015-02615 CVE-2015-2961 · GHSA-hx6q-2wx5-337x
Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and…
Priority LOW 34
Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators.
TI-2015-02614 CVE-2015-2960 · GHSA-ccw8-8wj9-vq37
Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.