CVE-2022-38772

Published: Aug 29, 2022Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

Affected (208)

Products: Zohocorp: Manageengine Netflow Analyzer, Manageengine Network Configuration Manager, Manageengine Opmanager, Manageengine Opmanager Msp, Manageengine Opmanager Plus, Manageengine Oputils

Zohocorp

6 products

Manageengine Netflow Analyzer

Manageengine Network Configuration Manager

Manageengine Opmanager

Manageengine Opmanager Msp

Manageengine Opmanager Plus

Manageengine Oputils

Configuration A

208 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125450
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125451
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125452
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125453
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125455
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125456
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125459
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125464
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125467
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125469
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125471
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125476
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125482
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125483
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125484
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125485
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125488
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125490
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125557
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125566
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125568
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125582
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125584
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125585
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125606
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125615
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125647
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125656
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125657
Zohocorp Manageengine Netflow Analyzer	Version 12.5 build125664
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126000
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126001
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126100
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126101
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126102
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126113
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126114
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126115
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126116
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126117
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126118
Zohocorp Manageengine Netflow Analyzer	Version 12.6 build126119
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125450
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125451
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125452
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125453
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125455
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125456
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125459
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125465
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125469
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125471
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125475
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125482
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125483
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125485
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125488
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125490
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125565
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125568
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125583
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125584
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125598
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125612
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125615
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125617
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125646
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125650
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125656
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125657
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125664
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126000
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126001
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126002
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126100
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126101
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126102
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126103
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126104
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126113
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126114
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126115
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126116
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126117
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126118
Zohocorp Manageengine Network Configuration Manager	Version 12.6 build126119
Zohocorp Manageengine Opmanager	Version 12.5 build125450
Zohocorp Manageengine Opmanager	Version 12.5 build125451
Zohocorp Manageengine Opmanager	Version 12.5 build125452
Zohocorp Manageengine Opmanager	Version 12.5 build125453
Zohocorp Manageengine Opmanager	Version 12.5 build125455
Zohocorp Manageengine Opmanager	Version 12.5 build125456
Zohocorp Manageengine Opmanager	Version 12.5 build125457
Zohocorp Manageengine Opmanager	Version 12.5 build125466
Zohocorp Manageengine Opmanager	Version 12.5 build125467
Zohocorp Manageengine Opmanager	Version 12.5 build125468
Zohocorp Manageengine Opmanager	Version 12.5 build125469
Zohocorp Manageengine Opmanager	Version 12.5 build125470
Zohocorp Manageengine Opmanager	Version 12.5 build125476
Zohocorp Manageengine Opmanager	Version 12.5 build125482
Zohocorp Manageengine Opmanager	Version 12.5 build125483
Zohocorp Manageengine Opmanager	Version 12.5 build125485
Zohocorp Manageengine Opmanager	Version 12.5 build125486
Zohocorp Manageengine Opmanager	Version 12.5 build125487
Zohocorp Manageengine Opmanager	Version 12.5 build125488
Zohocorp Manageengine Opmanager	Version 12.5 build125489
Zohocorp Manageengine Opmanager	Version 12.5 build125567
Zohocorp Manageengine Opmanager	Version 12.5 build125568
Zohocorp Manageengine Opmanager	Version 12.5 build125587
Zohocorp Manageengine Opmanager	Version 12.5 build125588
Zohocorp Manageengine Opmanager	Version 12.5 build125589
Zohocorp Manageengine Opmanager	Version 12.5 build125597
Zohocorp Manageengine Opmanager	Version 12.5 build125598
Zohocorp Manageengine Opmanager	Version 12.5 build125599
Zohocorp Manageengine Opmanager	Version 12.5 build125601
Zohocorp Manageengine Opmanager	Version 12.5 build125603
Zohocorp Manageengine Opmanager	Version 12.5 build125604
Zohocorp Manageengine Opmanager	Version 12.5 build125605
Zohocorp Manageengine Opmanager	Version 12.5 build125611
Zohocorp Manageengine Opmanager	Version 12.5 build125612
Zohocorp Manageengine Opmanager	Version 12.5 build125613
Zohocorp Manageengine Opmanager	Version 12.5 build125614
Zohocorp Manageengine Opmanager	Version 12.5 build125615
Zohocorp Manageengine Opmanager	Version 12.5 build125616
Zohocorp Manageengine Opmanager	Version 12.5 build125617
Zohocorp Manageengine Opmanager	Version 12.5 build125628
Zohocorp Manageengine Opmanager	Version 12.5 build125629
Zohocorp Manageengine Opmanager	Version 12.5 build125630
Zohocorp Manageengine Opmanager	Version 12.5 build125631
Zohocorp Manageengine Opmanager	Version 12.5 build125632
Zohocorp Manageengine Opmanager	Version 12.5 build125634
Zohocorp Manageengine Opmanager	Version 12.5 build125635
Zohocorp Manageengine Opmanager	Version 12.5 build125638
Zohocorp Manageengine Opmanager	Version 12.5 build125639
Zohocorp Manageengine Opmanager	Version 12.5 build125645
Zohocorp Manageengine Opmanager	Version 12.5 build125648
Zohocorp Manageengine Opmanager	Version 12.5 build125649
Zohocorp Manageengine Opmanager	Version 12.5 build125651
Zohocorp Manageengine Opmanager	Version 12.5 build125652
Zohocorp Manageengine Opmanager	Version 12.5 build125653
Zohocorp Manageengine Opmanager	Version 12.5 build125654
Zohocorp Manageengine Opmanager	Version 12.5 build125655
Zohocorp Manageengine Opmanager	Version 12.5 build125656
Zohocorp Manageengine Opmanager	Version 12.5 build125657
Zohocorp Manageengine Opmanager	Version 12.5 build125664
Zohocorp Manageengine Opmanager	Version 12.6 build126000
Zohocorp Manageengine Opmanager	Version 12.6 build126001
Zohocorp Manageengine Opmanager	Version 12.6 build126002
Zohocorp Manageengine Opmanager	Version 12.6 build126100
Zohocorp Manageengine Opmanager	Version 12.6 build126101
Zohocorp Manageengine Opmanager	Version 12.6 build126102
Zohocorp Manageengine Opmanager	Version 12.6 build126103
Zohocorp Manageengine Opmanager	Version 12.6 build126104
Zohocorp Manageengine Opmanager	Version 12.6 build126113
Zohocorp Manageengine Opmanager	Version 12.6 build126114
Zohocorp Manageengine Opmanager	Version 12.6 build126115
Zohocorp Manageengine Opmanager	Version 12.6 build126116
Zohocorp Manageengine Opmanager	Version 12.6 build126117
Zohocorp Manageengine Opmanager	Version 12.6 build126118
Zohocorp Manageengine Opmanager	Version 12.6 build126119
Zohocorp Manageengine Opmanager Msp	Version 12.5 build125450
Zohocorp Manageengine Opmanager Msp	Version 12.5 build125656
Zohocorp Manageengine Opmanager Msp	Version 12.5 build125657
Zohocorp Manageengine Opmanager Msp	Version 12.5 build125664
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126000
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126001
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126002
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126100
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126103
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126104
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126113
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126117
Zohocorp Manageengine Opmanager Msp	Version 12.6 build126119
Zohocorp Manageengine Opmanager Plus	Version 12.5 build125450
Zohocorp Manageengine Opmanager Plus	Version 12.5 build125656
Zohocorp Manageengine Opmanager Plus	Version 12.5 build125657
Zohocorp Manageengine Opmanager Plus	Version 12.5 build125664
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126000
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126001
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126002
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126100
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126103
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126104
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126113
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126117
Zohocorp Manageengine Opmanager Plus	Version 12.6 build126119
Zohocorp Manageengine Oputils	Version 12.5 build125450
Zohocorp Manageengine Oputils	Version 12.5 build125451
Zohocorp Manageengine Oputils	Version 12.5 build125452
Zohocorp Manageengine Oputils	Version 12.5 build125453
Zohocorp Manageengine Oputils	Version 12.5 build125455
Zohocorp Manageengine Oputils	Version 12.5 build125456
Zohocorp Manageengine Oputils	Version 12.5 build125657
Zohocorp Manageengine Oputils	Version 12.5 build125664
Zohocorp Manageengine Oputils	Version 12.6 build126000
Zohocorp Manageengine Oputils	Version 12.6 build126001
Zohocorp Manageengine Oputils	Version 12.6 build126002
Zohocorp Manageengine Oputils	Version 12.6 build126100
Zohocorp Manageengine Oputils	Version 12.6 build126101
Zohocorp Manageengine Oputils	Version 12.6 build126102
Zohocorp Manageengine Oputils	Version 12.6 build126103
Zohocorp Manageengine Oputils	Version 12.6 build126104
Zohocorp Manageengine Oputils	Version 12.6 build126113
Zohocorp Manageengine Oputils	Version 12.6 build126114
Zohocorp Manageengine Oputils	Version 12.6 build126115
Zohocorp Manageengine Oputils	Version 12.6 build126116
Zohocorp Manageengine Oputils	Version 12.6 build126117
Zohocorp Manageengine Oputils	Version 12.6 build126119

References (4)

https://manageengine.com

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/itom/advisory/cve-2022-38772.html

Source: cve@mitre.org

Vendor Advisory

https://manageengine.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.manageengine.com/itom/advisory/cve-2022-38772.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.