Login Request a demo
MO
Product
ManageEngine OpManager
by Zohocorp · last CVE Sep 23, 2026
67
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities67In the news0Timeline
Severity mix
Critical 18High 29Medium 11Low 0
Severity
All severities67Critical18High29Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ManageEngine OpManager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-11561
6.5
2%
May 23
An issue was discovered in ZOHO ManageEngine OpManager 12.2
Affected: 12.2
CVE-2018-20339
6.1
2%
Dec 21
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section
Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2018-19921
6.1
2%
Dec 6
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller
Affected: 11.4; 11.5; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2018-18716
6.1
3%
Nov 20
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability
Affected: 11.4; 11.5; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2018-18715
6.1
3%
Nov 20
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS
Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2018-19288
6.1
2%
Nov 15
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API
Affected: 11.4; 11.5; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2018-18262
6.1
2%
Oct 17
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS
Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2018-12998
6.1
99%
Jun 29
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before…
Affected: All versions, or not specified
CVE-2023-6105
5.5
1%
Nov 15
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed
Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more
CVE-2022-43473
5.4
20%
Mar 30
A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168
Affected: before 12.6; 12.6; 12.6; 12.6; 12.6; 12.6; +34 more
CVE-2017-11560
5.4
1%
May 23
An issue was discovered in ZOHO ManageEngine OpManager 12.2
Affected: 12.2
Showing 11