ManageEngine Network Configuration Manager vulnerabilities

Product

ManageEngine Network Configuration Manager

by Zohocorp · last CVE Sep 23, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 3High 11Medium 2Low 0

Severity

All severities16 Critical3 High11 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ManageEngine Network Configuration Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-29505	8.8	1%	Aug 4	An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165 Affected: 12.6
CVE-2022-38772	8.8	78%	Aug 29	Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more
CVE-2022-37024	8.8	80%	Aug 9	Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003,… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more
CVE-2023-47211	8.6	47%	Jan 8	A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258 Affected: before 12.7; 12.7; 12.7; 12.7; 12.7; 12.7; +2 more
CVE-2022-35404	8.2	3%	Jul 18	ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more
CVE-2019-12133	7.8	2%	Jun 18	Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 11.0
CVE-2026-12370	7.6	2%	Sep 23	Remote Code Execution Vulnerability Affected: before 12.8.668
CVE-2026-15358	7.5	1%	Sep 23	Path Traversal Vulnerability Affected: before 12.8.671
CVE-2022-36923	7.5	8%	Aug 10	Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more
CVE-2018-18980	7.5	25%	Nov 6	An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a… Affected: before 12.3.214
CVE-2018-12997	7.5	7%	Jun 29	Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before… Affected: All versions, or not specified