MO
Product
ManageEngine OpManager
67
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 29Medium 11Low 0
Watch
Add ManageEngine OpManager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18716 | 6.1 | Nov 20 | Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability Affected: 11.4; 11.5; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-18715 | 6.1 | Nov 20 | Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-19288 | 6.1 | Nov 15 | Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API Affected: 11.4; 11.5; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-18262 | 6.1 | Oct 17 | Zoho ManageEngine OpManager 12.3 before build 123214 has XSS Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-12998 | 6.1 | Jun 29 | A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before… Affected: All versions, or not specified |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2022-43473 | 5.4 | Mar 30 | A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168 Affected: before 12.6; 12.6; 12.6; 12.6; 12.6; 12.6; +34 more |
| CVE-2017-11560 | 5.4 | May 23 | An issue was discovered in ZOHO ManageEngine OpManager 12.2 Affected: 12.2 |
| CVE-2015-7766 | – | Oct 9 | PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to… Affected: through 11.5; 11.6 |
| CVE-2015-7765 | – | Oct 9 | ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain… Affected: 11.5 |
| CVE-2014-7864 | – | Feb 4 | Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier… Affected: 8.8; 9.0; 9.1; 9.2; 9.4; 10.0; +8 more |
| CVE-2014-7866 | – | Dec 10 | Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or… Affected: 8.8; 9.0; 9.1; 9.2; 9.4; 10.0; +7 more |
| CVE-2014-7868 | – | Dec 4 | Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated… Affected: 11.3; 11.4 |
| CVE-2014-7867 | – | Dec 4 | SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and… Affected: 11.3; 11.4 |
| CVE-2014-6036 | – | Dec 4 | Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows… Affected: through 11.3 |
| CVE-2014-6035 | – | Dec 4 | Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and earlier allows remote attackers to write and execute arbitrary files… Affected: through 11.3; 11.4 |
| CVE-2014-6034 | – | Dec 4 | Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus… Affected: 8.8; 9.0; 9.1; 9.2; 9.4; 10.0; +6 more |