CVE-2020-11527

Published: Apr 4, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.

Affected (55)

Products: Zohocorp: Manageengine Opmanager

Zohocorp

1 product

Manageengine Opmanager

Configuration A

55 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Opmanager	Before 12.4
Zohocorp Manageengine Opmanager	Version 12.4
Zohocorp Manageengine Opmanager	Version 12.4 build124000
Zohocorp Manageengine Opmanager	Version 12.4 build124011
Zohocorp Manageengine Opmanager	Version 12.4 build124012
Zohocorp Manageengine Opmanager	Version 12.4 build124013
Zohocorp Manageengine Opmanager	Version 12.4 build124014
Zohocorp Manageengine Opmanager	Version 12.4 build124015
Zohocorp Manageengine Opmanager	Version 12.4 build124016
Zohocorp Manageengine Opmanager	Version 12.4 build124022
Zohocorp Manageengine Opmanager	Version 12.4 build124023
Zohocorp Manageengine Opmanager	Version 12.4 build124024
Zohocorp Manageengine Opmanager	Version 12.4 build124025
Zohocorp Manageengine Opmanager	Version 12.4 build124026
Zohocorp Manageengine Opmanager	Version 12.4 build124027
Zohocorp Manageengine Opmanager	Version 12.4 build124030
Zohocorp Manageengine Opmanager	Version 12.4 build124033
Zohocorp Manageengine Opmanager	Version 12.4 build124037
Zohocorp Manageengine Opmanager	Version 12.4 build124039
Zohocorp Manageengine Opmanager	Version 12.4 build124040
Zohocorp Manageengine Opmanager	Version 12.4 build124041
Zohocorp Manageengine Opmanager	Version 12.4 build124042
Zohocorp Manageengine Opmanager	Version 12.4 build124043
Zohocorp Manageengine Opmanager	Version 12.4 build124051
Zohocorp Manageengine Opmanager	Version 12.4 build124053
Zohocorp Manageengine Opmanager	Version 12.4 build124054
Zohocorp Manageengine Opmanager	Version 12.4 build124056
Zohocorp Manageengine Opmanager	Version 12.4 build124058
Zohocorp Manageengine Opmanager	Version 12.4 build124065
Zohocorp Manageengine Opmanager	Version 12.4 build124066
Zohocorp Manageengine Opmanager	Version 12.4 build124067
Zohocorp Manageengine Opmanager	Version 12.4 build124069
Zohocorp Manageengine Opmanager	Version 12.4 build124070
Zohocorp Manageengine Opmanager	Version 12.4 build124071
Zohocorp Manageengine Opmanager	Version 12.4 build124074
Zohocorp Manageengine Opmanager	Version 12.4 build124075
Zohocorp Manageengine Opmanager	Version 12.4 build124081
Zohocorp Manageengine Opmanager	Version 12.4 build124082
Zohocorp Manageengine Opmanager	Version 12.4 build124085
Zohocorp Manageengine Opmanager	Version 12.4 build124086
Zohocorp Manageengine Opmanager	Version 12.4 build124087
Zohocorp Manageengine Opmanager	Version 12.4 build124089
Zohocorp Manageengine Opmanager	Version 12.4 build124095
Zohocorp Manageengine Opmanager	Version 12.4 build124096
Zohocorp Manageengine Opmanager	Version 12.4 build124097
Zohocorp Manageengine Opmanager	Version 12.4 build124098
Zohocorp Manageengine Opmanager	Version 12.4 build124099
Zohocorp Manageengine Opmanager	Version 12.4 build124100
Zohocorp Manageengine Opmanager	Version 12.4 build124101
Zohocorp Manageengine Opmanager	Version 12.4 build124102
Zohocorp Manageengine Opmanager	Version 12.4 build124168
Zohocorp Manageengine Opmanager	Version 12.4 build124169
Zohocorp Manageengine Opmanager	Version 12.4 build124175
Zohocorp Manageengine Opmanager	Version 12.4 build124176
Zohocorp Manageengine Opmanager	Version 12.4 build124178

References (2)

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#124181

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#124181

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.