Unscored severity · published Oct 9, 2015
CVE-2015-7765
ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain…
–
CVSS
67.3%
EPSS
No
On KEV
Description
ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access by leveraging knowledge of this password.
Exploitation
Is it being used?
Exploit prediction (EPSS)67.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Manageengine Opmanager · Zohocorp
11.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7765
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7765
Exploit
http://packetstormsecurity.com/files/133596/ManageEngine-OpManager-Remote-Code-Execution.html
seclists.org
http://seclists.org/fulldisclosure/2015/Sep/66
Exploit
http://www.rapid7.com/db/modules/exploit/windows/http/manage_engine_opmanager_rce
support.zoho.com
https://support.zoho.com/portal/manageengine/helpcenter/articles/pgsql-submitquery-do-vulnerability
Exploit
https://www.exploit-db.com/exploits/38221/
More from Manageengine Opmanager
9.9
CVE-2026-19599
Remote Code Execution vulnerability
9.8
CVE-2022-29535
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports
9.8
CVE-2021-44514
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories
9.8
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API
9.8
CVE-2021-40493
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module