ManageEngine Firewall Analyzer vulnerabilities | LiveThreat CVE Feed

Product

ManageEngine Firewall Analyzer

by Zohocorp · last CVE Sep 23, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities19 In the news0 Timeline

Severity mix

Critical 2High 14Medium 3Low 0

Severity

All severities19 Critical2 High14 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ManageEngine Firewall Analyzer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-76978	8.8	8%	Sep 23	Command Injection vulnerability Affected: before 12.8.710
CVE-2026-14913	8.8	2%	Sep 23	SQL Injection vulnerability Affected: before 12.8.670
CVE-2022-37024	8.8	80%	Aug 9	Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003,… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more
CVE-2017-14123	8.8	6%	Sep 4	Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section Affected: 12.2
CVE-2023-47211	8.6	47%	Jan 8	A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258 Affected: before 12.7; 12.7; 12.7; 12.7; 12.7; 12.7; +3 more
CVE-2022-35404	8.2	3%	Jul 18	ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more
CVE-2026-84787	8.1	2%	Sep 23	Privilege Escalation vulnerability Affected: before 12.8.711
CVE-2019-17421	7.8	1%	Nov 21	Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to… Affected: 12.4
CVE-2026-76979	7.7	2%	Sep 23	XML Injection vulnerability Affected: before 12.8.710
CVE-2022-36923	7.5	8%	Aug 10	Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more
CVE-2015-7781	7.5	7%	Jun 27	ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions Affected: through 7.6
CVE-2026-76980	7.4	1%	Sep 23	Data Exposure vulnerability Affected: before 12.8.710
CVE-2026-84789	7.1	1%	Sep 23	Broken Access Control vulnerability Affected: before 12.8.711
CVE-2026-84791	7.1	1%	Sep 23	Broken Access Control vulnerability Affected: before 12.8.711