CVE-2021-44514

nvd nist

Published: Dec 9, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.

Affected (130)

Products: Zohocorp: Manageengine Opmanager

Zohocorp

1 product

Manageengine Opmanager

Configuration A

130 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Opmanager	Version 12.5
Zohocorp Manageengine Opmanager	Version 12.5 build125000
Zohocorp Manageengine Opmanager	Version 12.5 build125002
Zohocorp Manageengine Opmanager	Version 12.5 build125100
Zohocorp Manageengine Opmanager	Version 12.5 build125101
Zohocorp Manageengine Opmanager	Version 12.5 build125102
Zohocorp Manageengine Opmanager	Version 12.5 build125108
Zohocorp Manageengine Opmanager	Version 12.5 build125110
Zohocorp Manageengine Opmanager	Version 12.5 build125111
Zohocorp Manageengine Opmanager	Version 12.5 build125112
Zohocorp Manageengine Opmanager	Version 12.5 build125113
Zohocorp Manageengine Opmanager	Version 12.5 build125114
Zohocorp Manageengine Opmanager	Version 12.5 build125116
Zohocorp Manageengine Opmanager	Version 12.5 build125117
Zohocorp Manageengine Opmanager	Version 12.5 build125118
Zohocorp Manageengine Opmanager	Version 12.5 build125120
Zohocorp Manageengine Opmanager	Version 12.5 build125121
Zohocorp Manageengine Opmanager	Version 12.5 build125123
Zohocorp Manageengine Opmanager	Version 12.5 build125124
Zohocorp Manageengine Opmanager	Version 12.5 build125125
Zohocorp Manageengine Opmanager	Version 12.5 build125136
Zohocorp Manageengine Opmanager	Version 12.5 build125137
Zohocorp Manageengine Opmanager	Version 12.5 build125139
Zohocorp Manageengine Opmanager	Version 12.5 build125140
Zohocorp Manageengine Opmanager	Version 12.5 build125143
Zohocorp Manageengine Opmanager	Version 12.5 build125144
Zohocorp Manageengine Opmanager	Version 12.5 build125145
Zohocorp Manageengine Opmanager	Version 12.5 build125156
Zohocorp Manageengine Opmanager	Version 12.5 build125157
Zohocorp Manageengine Opmanager	Version 12.5 build125158
Zohocorp Manageengine Opmanager	Version 12.5 build125159
Zohocorp Manageengine Opmanager	Version 12.5 build125161
Zohocorp Manageengine Opmanager	Version 12.5 build125163
Zohocorp Manageengine Opmanager	Version 12.5 build125174
Zohocorp Manageengine Opmanager	Version 12.5 build125175
Zohocorp Manageengine Opmanager	Version 12.5 build125176
Zohocorp Manageengine Opmanager	Version 12.5 build125177
Zohocorp Manageengine Opmanager	Version 12.5 build125178
Zohocorp Manageengine Opmanager	Version 12.5 build125180
Zohocorp Manageengine Opmanager	Version 12.5 build125181
Zohocorp Manageengine Opmanager	Version 12.5 build125192
Zohocorp Manageengine Opmanager	Version 12.5 build125193
Zohocorp Manageengine Opmanager	Version 12.5 build125194
Zohocorp Manageengine Opmanager	Version 12.5 build125195
Zohocorp Manageengine Opmanager	Version 12.5 build125196
Zohocorp Manageengine Opmanager	Version 12.5 build125197
Zohocorp Manageengine Opmanager	Version 12.5 build125198
Zohocorp Manageengine Opmanager	Version 12.5 build125201
Zohocorp Manageengine Opmanager	Version 12.5 build125204
Zohocorp Manageengine Opmanager	Version 12.5 build125212
Zohocorp Manageengine Opmanager	Version 12.5 build125213
Zohocorp Manageengine Opmanager	Version 12.5 build125214
Zohocorp Manageengine Opmanager	Version 12.5 build125215
Zohocorp Manageengine Opmanager	Version 12.5 build125216
Zohocorp Manageengine Opmanager	Version 12.5 build125228
Zohocorp Manageengine Opmanager	Version 12.5 build125229
Zohocorp Manageengine Opmanager	Version 12.5 build125230
Zohocorp Manageengine Opmanager	Version 12.5 build125231
Zohocorp Manageengine Opmanager	Version 12.5 build125232
Zohocorp Manageengine Opmanager	Version 12.5 build125233
Zohocorp Manageengine Opmanager	Version 12.5 build125312
Zohocorp Manageengine Opmanager	Version 12.5 build125323
Zohocorp Manageengine Opmanager	Version 12.5 build125324
Zohocorp Manageengine Opmanager	Version 12.5 build125326
Zohocorp Manageengine Opmanager	Version 12.5 build125328
Zohocorp Manageengine Opmanager	Version 12.5 build125329
Zohocorp Manageengine Opmanager	Version 12.5 build125340
Zohocorp Manageengine Opmanager	Version 12.5 build125341
Zohocorp Manageengine Opmanager	Version 12.5 build125342
Zohocorp Manageengine Opmanager	Version 12.5 build125343
Zohocorp Manageengine Opmanager	Version 12.5 build125344
Zohocorp Manageengine Opmanager	Version 12.5 build125346
Zohocorp Manageengine Opmanager	Version 12.5 build125358
Zohocorp Manageengine Opmanager	Version 12.5 build125359
Zohocorp Manageengine Opmanager	Version 12.5 build125360
Zohocorp Manageengine Opmanager	Version 12.5 build125361
Zohocorp Manageengine Opmanager	Version 12.5 build125362
Zohocorp Manageengine Opmanager	Version 12.5 build125364
Zohocorp Manageengine Opmanager	Version 12.5 build125366
Zohocorp Manageengine Opmanager	Version 12.5 build125367
Zohocorp Manageengine Opmanager	Version 12.5 build125375
Zohocorp Manageengine Opmanager	Version 12.5 build125376
Zohocorp Manageengine Opmanager	Version 12.5 build125377
Zohocorp Manageengine Opmanager	Version 12.5 build125378
Zohocorp Manageengine Opmanager	Version 12.5 build125379
Zohocorp Manageengine Opmanager	Version 12.5 build125380
Zohocorp Manageengine Opmanager	Version 12.5 build125381
Zohocorp Manageengine Opmanager	Version 12.5 build125382
Zohocorp Manageengine Opmanager	Version 12.5 build125386
Zohocorp Manageengine Opmanager	Version 12.5 build125392
Zohocorp Manageengine Opmanager	Version 12.5 build125393
Zohocorp Manageengine Opmanager	Version 12.5 build125394
Zohocorp Manageengine Opmanager	Version 12.5 build125397
Zohocorp Manageengine Opmanager	Version 12.5 build125398
Zohocorp Manageengine Opmanager	Version 12.5 build125399
Zohocorp Manageengine Opmanager	Version 12.5 build125405
Zohocorp Manageengine Opmanager	Version 12.5 build125410
Zohocorp Manageengine Opmanager	Version 12.5 build125411
Zohocorp Manageengine Opmanager	Version 12.5 build125413
Zohocorp Manageengine Opmanager	Version 12.5 build125414
Zohocorp Manageengine Opmanager	Version 12.5 build125415
Zohocorp Manageengine Opmanager	Version 12.5 build125416
Zohocorp Manageengine Opmanager	Version 12.5 build125417
Zohocorp Manageengine Opmanager	Version 12.5 build125420
Zohocorp Manageengine Opmanager	Version 12.5 build125428
Zohocorp Manageengine Opmanager	Version 12.5 build125430
Zohocorp Manageengine Opmanager	Version 12.5 build125431
Zohocorp Manageengine Opmanager	Version 12.5 build125432
Zohocorp Manageengine Opmanager	Version 12.5 build125433
Zohocorp Manageengine Opmanager	Version 12.5 build125434
Zohocorp Manageengine Opmanager	Version 12.5 build125437
Zohocorp Manageengine Opmanager	Version 12.5 build125446
Zohocorp Manageengine Opmanager	Version 12.5 build125448
Zohocorp Manageengine Opmanager	Version 12.5 build125450
Zohocorp Manageengine Opmanager	Version 12.5 build125451
Zohocorp Manageengine Opmanager	Version 12.5 build125452
Zohocorp Manageengine Opmanager	Version 12.5 build125453
Zohocorp Manageengine Opmanager	Version 12.5 build125455
Zohocorp Manageengine Opmanager	Version 12.5 build125466
Zohocorp Manageengine Opmanager	Version 12.5 build125467
Zohocorp Manageengine Opmanager	Version 12.5 build125468
Zohocorp Manageengine Opmanager	Version 12.5 build125469
Zohocorp Manageengine Opmanager	Version 12.5 build125470
Zohocorp Manageengine Opmanager	Version 12.5 build125482
Zohocorp Manageengine Opmanager	Version 12.5 build125483
Zohocorp Manageengine Opmanager	Version 12.5 build125485
Zohocorp Manageengine Opmanager	Version 12.5 build125486
Zohocorp Manageengine Opmanager	Version 12.5 build125487
Zohocorp Manageengine Opmanager	Version 12.5 build125488
Zohocorp Manageengine Opmanager	Version 12.5 build125489

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125490

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125490

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.