CVE-2023-47211

< 12.7

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted

9.1CRITICAL

CVE-2023-6105

< 12.5

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

5.5MEDIUM

CVE-2022-37024

all versions

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 20

8.8HIGH

CVE-2022-36923

all versions

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, an

7.5HIGH

CVE-2022-35404

< 12.5

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory

8.2HIGH

CVE-2019-17421

all versions

Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12

7.8HIGH

CVE-2019-11678

all versions

The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.

9.8CRITICAL

CVE-2019-11677

all versions

The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External En

9.8CRITICAL

CVE-2019-11676

all versions

The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks.

6.1MEDIUM

CVE-2017-14123

all versions

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can

8.8HIGH

CVE-2015-7781

<= 7.6

ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

7.5HIGH

CVE-2015-7780

<= 7.6

Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.

6.5MEDIUM

CVE-2012-4891

all versions

Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject a

CVE-2012-4889

all versions

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitra

CVE-2008-1775

all versions

Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject ar

CVE-2007-1642

all versions

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a di