CVE-2020-11946

Published: Apr 20, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call.

Products: Zohocorp: Manageengine Opmanager

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Opmanager	Version 12.5 build125000
Zohocorp Manageengine Opmanager	Version 12.5 build125002
Zohocorp Manageengine Opmanager	Version 12.5 build125100
Zohocorp Manageengine Opmanager	Version 12.5 build125101
Zohocorp Manageengine Opmanager	Version 12.5 build125102
Zohocorp Manageengine Opmanager	Version 12.5 build125108
Zohocorp Manageengine Opmanager	Version 12.5 build125110
Zohocorp Manageengine Opmanager	Version 12.5 build125111
Zohocorp Manageengine Opmanager	Version 12.5 build125112
Zohocorp Manageengine Opmanager	Version 12.5 build125113
Zohocorp Manageengine Opmanager	Version 12.5 build125114
Zohocorp Manageengine Opmanager	Version 12.5 build125116
Zohocorp Manageengine Opmanager	Version 12.5 build125117
Zohocorp Manageengine Opmanager	Version 12.5 build125118