MO
Product
ManageEngine OpManager
67
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 29Medium 11Low 0
Watch
Add ManageEngine OpManager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19599 | 9.9 | Sep 23 | Remote Code Execution vulnerability Affected: before 12.8.711 |
| CVE-2022-29535 | 9.8 | May 5 | Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2021-44514 | 9.8 | Dec 9 | OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2021-41075 | 9.8 | Oct 13 | The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2021-40493 | 9.8 | Oct 13 | Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2021-41288 | 9.8 | Sep 30 | Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API Affected: through 12.4; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2021-3287 | 9.8 | Apr 22 | Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2020-28653 | 9.8 | Feb 3 | Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2020-10541 | 9.8 | Mar 13 | Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request Affected: before 12.4.179 |
| CVE-2019-17602 | 9.8 | Oct 15 | An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089 Affected: before 12.4; 12.4; 12.4; 12.4; 12.4; 12.4; +34 more |
| CVE-2019-15106 | 9.8 | Aug 16 | An issue was discovered in Zoho ManageEngine OpManager in builds before 14310 Affected: through 12.4.034 |
| CVE-2018-20338 | 9.8 | Dec 21 | Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-20173 | 9.8 | Dec 17 | Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-18949 | 9.8 | Nov 5 | Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings Affected: 11.4; 11.5; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-18475 | 9.8 | Oct 23 | Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-17243 | 9.8 | Sep 20 | Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection Affected: before 12.3 |
| CVE-2015-9107 | 9.8 | Aug 4 | Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices Affected: 11.0; 11.1; 11.2; 11.3; 11.4; 11.5; +2 more |
| CVE-2021-20078 | 9.1 | Apr 1 | Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
Showing 18