MN
Product
ManageEngine NetFlow Analyzer
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 14Low 0
Watch
Add ManageEngine NetFlow Analyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12196 | 9.8 | Jun 5 | A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the… Affected: 12.3 |
| CVE-2022-38772 | 8.8 | Aug 29 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2022-37024 | 8.8 | Aug 9 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003,… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more |
| CVE-2023-47211 | 8.6 | Jan 8 | A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258 Affected: before 12.7; 12.7; 12.7; 12.7; 12.7; 12.7; +5 more |
| CVE-2022-35404 | 8.2 | Jul 18 | ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 11.0 |
| CVE-2026-12370 | 7.6 | Sep 23 | Remote Code Execution Vulnerability Affected: before 12.8.668 |
| CVE-2022-36923 | 7.5 | Aug 10 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more |
| CVE-2018-12997 | 7.5 | Jun 29 | Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before… Affected: All versions, or not specified |
| CVE-2019-8929 | 6.1 | May 17 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Affected: 7.0.0.2 |
| CVE-2019-8928 | 6.1 | May 17 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Affected: 7.0.0.2 |
| CVE-2019-8927 | 6.1 | May 17 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Affected: 7.0.0.2 |
| CVE-2019-8926 | 6.1 | May 17 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Affected: 7.0.0.2 |
| CVE-2019-7427 | 6.1 | May 7 | XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes… Affected: 7.0.0.2 |
| CVE-2019-7426 | 6.1 | May 7 | XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName,… Affected: 7.0.0.2 |
| CVE-2019-7425 | 6.1 | Mar 17 | XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter Affected: 7.0.0.2 |
| CVE-2019-7424 | 6.1 | Mar 17 | XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST… Affected: 7.0.0.2 |
| CVE-2019-7423 | 6.1 | Mar 17 | XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter Affected: 7.0.0.2 |
| CVE-2019-7422 | 6.1 | Mar 17 | XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter Affected: 7.0.0.2 |
| CVE-2018-12998 | 6.1 | Jun 29 | A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before… Affected: All versions, or not specified |
| CVE-2018-10803 | 6.1 | May 10 | Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (build 123125) allows remote attackers to… Affected: 12.3 before 12.3.125 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2019-8925 | 4.3 | May 17 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 Affected: 7.0.0.2 |
| CVE-2015-4418 | – | Jun 9 | Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by… Affected: All versions, or not specified |
| CVE-2015-2961 | – | Jun 9 | Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators Affected: All versions, or not specified |
| CVE-2015-2960 | – | Jun 9 | Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: All versions, or not specified |
| CVE-2015-2959 | – | Jun 9 | Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensitive information, modify passwords, or… Affected: All versions, or not specified |
| CVE-2014-5446 | – | Dec 4 | Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote… Affected: 8.6; 9.0; 9.1; 9.5; 9.6; 9.7; +7 more |
| CVE-2014-5445 | – | Dec 4 | Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read… Affected: 8.6 through 10.2 |
Showing 29