Opmanager

opmanager

Vendor: Manageengine • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-19554

1Manageengine

1Opmanager

Jun 17, 2026

Sep 21, 2021

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.

CVE-2007-5891

1Manageengine

2Opmanager

Opmanager Msp

Apr 23, 2026

Nov 8, 2007

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) requestid, (2) fileid, (3) woMode, and (2) woID parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less