Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority MEDIUM 51

ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.05057 Published 2026-09-23 Fixed in 12.8.711 CWE-78
Priority MEDIUM 44

ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02187 Published 2026-09-23 Fixed in 12.8.711 CWE-306
Priority MEDIUM 41

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.02101 Published 2026-09-23 Fixed in 12.8.711 CWE-250
Priority LOW 34

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications fo…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0144 Published 2026-09-23 Fixed in 12.8.711 CWE-639
Priority LOW 34

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management repo…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0144 Published 2026-09-23 Fixed in 12.8.711 CWE-639