MF
Product
ManageEngine Firewall Analyzer
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 14Medium 3Low 0
Watch
Add ManageEngine Firewall Analyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11678 | 9.8 | May 2 | The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection Affected: 7.2; 7.2; 7.4; 7.6; 8.0; 8.1; +27 more |
| CVE-2019-11677 | 9.8 | May 2 | The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection Affected: 7.2; 7.2; 7.4; 7.6; 8.0; 8.1; +30 more |
| CVE-2026-76978 | 8.8 | Sep 23 | Command Injection vulnerability Affected: before 12.8.710 |
| CVE-2026-14913 | 8.8 | Sep 23 | SQL Injection vulnerability Affected: before 12.8.670 |
| CVE-2022-37024 | 8.8 | Aug 9 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003,… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more |
| CVE-2017-14123 | 8.8 | Sep 4 | Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section Affected: 12.2 |
| CVE-2023-47211 | 8.6 | Jan 8 | A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258 Affected: before 12.7; 12.7; 12.7; 12.7; 12.7; 12.7; +3 more |
| CVE-2022-35404 | 8.2 | Jul 18 | ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2026-84787 | 8.1 | Sep 23 | Privilege Escalation vulnerability Affected: before 12.8.711 |
| CVE-2019-17421 | 7.8 | Nov 21 | Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to… Affected: 12.4 |
| CVE-2026-76979 | 7.7 | Sep 23 | XML Injection vulnerability Affected: before 12.8.710 |
| CVE-2022-36923 | 7.5 | Aug 10 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more |
| CVE-2015-7781 | 7.5 | Jun 27 | ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions Affected: through 7.6 |
| CVE-2026-76980 | 7.4 | Sep 23 | Data Exposure vulnerability Affected: before 12.8.710 |
| CVE-2026-84789 | 7.1 | Sep 23 | Broken Access Control vulnerability Affected: before 12.8.711 |
| CVE-2026-84791 | 7.1 | Sep 23 | Broken Access Control vulnerability Affected: before 12.8.711 |
| CVE-2015-7780 | 6.5 | Jun 27 | Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0 Affected: through 7.6 |
| CVE-2019-11676 | 6.1 | May 2 | The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks Affected: 7.2; 7.2; 7.4; 7.6; 8.0; 8.1; +30 more |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
Showing 19