Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2020-28653

🗓️ 03 Feb 2021 16:00:18Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 135 Views🌐 WEB

Zoho OpManager Stable build before 125203 allows Remote Code Execution via SUM Servle

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for CVE-2020-2853
13 Sep 202117:27
–githubexploit
zdt
zdt		ManageEngine OpManager SumPDU Java Deserialization Exploit
21 Sep 202100:00
–zdt
circl
Circl		CVE-2020-28653
3 Feb 202118:49
–circl
cnnvd
CNNVD		ZOHO ManageEngine OpManager 安全漏洞
3 Feb 202100:00
–cnnvd
cnvd
CNVD		ZOHO ManageEngine OpManager Remote Code Execution Vulnerability
5 Feb 202100:00
–cnvd
cvelist
Cvelist		CVE-2020-28653
3 Feb 202116:00
–cvelist
kitploit
Kitploit		cve-2020-28653-poc
26 Aug 202620:16
–kitploit
kitploit
Kitploit		ManageEngine-CVE-2020-28653
25 Aug 202608:23
–kitploit
kitploit
Kitploit		CVE-2020-28653
27 Aug 202601:01
–kitploit
nessus
Tenable Nessus		ManageEngine OpManager Smart Update Manager RCE
2 Apr 202100:00
–nessus
Rows per page
NVD
Node
OR
zohocorpmanageengine_opmanagerRange<12.5
zohocorpmanageengine_opmanagerMatch12.5build125000
zohocorpmanageengine_opmanagerMatch12.5build125002
zohocorpmanageengine_opmanagerMatch12.5build125100
zohocorpmanageengine_opmanagerMatch12.5build125101
zohocorpmanageengine_opmanagerMatch12.5build125102
zohocorpmanageengine_opmanagerMatch12.5build125108
zohocorpmanageengine_opmanagerMatch12.5build125110
zohocorpmanageengine_opmanagerMatch12.5build125111
zohocorpmanageengine_opmanagerMatch12.5build125112
zohocorpmanageengine_opmanagerMatch12.5build125113
zohocorpmanageengine_opmanagerMatch12.5build125114
zohocorpmanageengine_opmanagerMatch12.5build125116
zohocorpmanageengine_opmanagerMatch12.5build125117
zohocorpmanageengine_opmanagerMatch12.5build125118
zohocorpmanageengine_opmanagerMatch12.5build125120
zohocorpmanageengine_opmanagerMatch12.5build125121
zohocorpmanageengine_opmanagerMatch12.5build125123
zohocorpmanageengine_opmanagerMatch12.5build125124
zohocorpmanageengine_opmanagerMatch12.5build125125
zohocorpmanageengine_opmanagerMatch12.5build125136
zohocorpmanageengine_opmanagerMatch12.5build125137
zohocorpmanageengine_opmanagerMatch12.5build125139
zohocorpmanageengine_opmanagerMatch12.5build125140
zohocorpmanageengine_opmanagerMatch12.5build125143
zohocorpmanageengine_opmanagerMatch12.5build125144
zohocorpmanageengine_opmanagerMatch12.5build125145
zohocorpmanageengine_opmanagerMatch12.5build125156
zohocorpmanageengine_opmanagerMatch12.5build125157
zohocorpmanageengine_opmanagerMatch12.5build125158
zohocorpmanageengine_opmanagerMatch12.5build125159
zohocorpmanageengine_opmanagerMatch12.5build125161
zohocorpmanageengine_opmanagerMatch12.5build125163
zohocorpmanageengine_opmanagerMatch12.5build125174
zohocorpmanageengine_opmanagerMatch12.5build125175
zohocorpmanageengine_opmanagerMatch12.5build125176
zohocorpmanageengine_opmanagerMatch12.5build125177
zohocorpmanageengine_opmanagerMatch12.5build125178
zohocorpmanageengine_opmanagerMatch12.5build125180
zohocorpmanageengine_opmanagerMatch12.5build125181
zohocorpmanageengine_opmanagerMatch12.5build125192
zohocorpmanageengine_opmanagerMatch12.5build125193
zohocorpmanageengine_opmanagerMatch12.5build125194
zohocorpmanageengine_opmanagerMatch12.5build125195
zohocorpmanageengine_opmanagerMatch12.5build125196
zohocorpmanageengine_opmanagerMatch12.5build125197
zohocorpmanageengine_opmanagerMatch12.5build125198
zohocorpmanageengine_opmanagerMatch12.5build125201
zohocorpmanageengine_opmanagerMatch12.5build125204
zohocorpmanageengine_opmanagerMatch12.5build125212
zohocorpmanageengine_opmanagerMatch12.5build125213
zohocorpmanageengine_opmanagerMatch12.5build125214
zohocorpmanageengine_opmanagerMatch12.5build125215
zohocorpmanageengine_opmanagerMatch12.5build125216
zohocorpmanageengine_opmanagerMatch12.5build125228
zohocorpmanageengine_opmanagerMatch12.5build125229
zohocorpmanageengine_opmanagerMatch12.5build125230
zohocorpmanageengine_opmanagerMatch12.5build125231
zohocorpmanageengine_opmanagerMatch12.5build125232
ParameterPositionPathDescriptionCWE
datarequest body/servlets/com.adventnet.tools.sum.transport.SUMHandShakeServletJava deserialization RCE in ManageEngine OpManager SUM via SUMHandShakeServlet (CVE-2020-28653)
datarequest body/servlets/com.adventnet.tools.sum.transport.SUMCommunicationServletJava deserialization RCE in ManageEngine OpManager SUM via SUMCommunicationServlet (CVE-2020-28653 / CVE-2021-3287 depending on version)

NEW: CVE-2020-28653 Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet. Severity: CRITICAL https://t.co/lqKZWq6oc7?amp=1

NEW: CVE-2020-28653 Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet. Severity: CRITICAL https://t.co/lqKZWq6oc7?amp=1

CVE-2020-28653 Pre-Auth RCE in ManageEngine OPManager

The vuln CVE-2020-28653 has a tweet created 0 days ago and retweeted 7 times. /_r_netsec/status/1419726236083888130 #Svamtscj7b6k54

CVE-2020-28653 Pre-Auth RCE in ManageEngine OPManager

CVE-2020-28653

CVE-2020-28653 - Pre-Auth RCE in ManageEngine OPManager

CVE-2020-28653 Pre-Auth RCE in ManageEngine OPManager: https://t.co/wb1QbS9j3S?amp=1 #follow & #RT #cybersecurity #infosec

CVE-2020-28653 Pre-Auth RCE in ManageEngine OPManager via /r/netsec https://t.co/GVEiV7lcyP?amp=1 #cybersecurity #netsec #news

I know no IPS that has a protection/signature/rule for the vulnerability CVE-2020-28653. The vuln was published 173 days ago by NIST. /search?src=sprv&q=CVE-2020-28653 #Svamtscj7b6k54

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 03:10Current
9.6High risk
Vulners AI Score9.6
CVSS 27.5
CVSS 3.19.8
EPSS0.787
In Wild
cve-2020-28653zohoopmanagerremote code executionsum servletsecurity flaw
135