Manageengine Opmanager Plus

manageengine_opmanager_plus

Vendor: Zohocorp • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-5466 1Zohocorp 4Manageengine Opmanager Manageengine Opmanager MspManageengine Opmanager Plus+1 more Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.
CVE-2023-47211 1Zohocorp 7Manageengine Firewall Analyzer Manageengine Netflow AnalyzerManageengine Network Configuration Manager+4 more Jun 17, 2026 Jan 8, 2024 N/A· v4 8.6 HIGH· v3 N/A· v2 A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB fil...Show more A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.Show less
CVE-2022-43473 1Zohocorp 3Manageengine Opmanager Manageengine Opmanager MspManageengine Opmanager Plus Jun 17, 2026 Mar 30, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payloa...Show more A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a malicious XML payload to trigger this vulnerability.Show less
CVE-2022-38772 1Zohocorp 6Manageengine Netflow Analyzer Manageengine Network Configuration ManagerManageengine Opmanager+3 more Jun 17, 2026 Aug 29, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that l...Show more Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.Show less
CVE-2022-37024 1Zohocorp 7Manageengine Firewall Analyzer Manageengine Netflow AnalyzerManageengine Network Configuration Manager+4 more Jun 17, 2026 Aug 10, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated user...Show more Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.Show less
CVE-2022-36923 1Zohocorp 7Manageengine Firewall Analyzer Manageengine Netflow AnalyzerManageengine Network Configuration Manager+4 more Jun 17, 2026 Aug 10, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow...Show more Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.Show less