CVE-2023-47211

< 12.7

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted

9.1CRITICAL

CVE-2023-6105

< 12.5

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

5.5MEDIUM

CVE-2023-29505

all versions

An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebS

4.3MEDIUM

CVE-2022-38772

all versions

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 12

8.8HIGH

CVE-2022-37024

all versions

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 20

8.8HIGH

CVE-2022-36923

all versions

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, an

7.5HIGH

CVE-2022-35404

< 12.5

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory

8.2HIGH

CVE-2021-43319

all versions

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the

9.8CRITICAL

CVE-2021-41081

>= 12.4 and < 12.5

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search.

9.8CRITICAL

CVE-2021-41080

>= 12.4 and < 12.5

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.

9.8CRITICAL

CVE-2019-12133

all versions

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\Manag

7.8HIGH

CVE-2018-18980

< 12.3.214

An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager befor

7.5HIGH

CVE-2018-12998

all versions

A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configurat

6.1MEDIUM

CVE-2018-12997

all versions

Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration

7.5HIGH