CVE-2022-36923

🗓️ 10 Aug 2022 14:17:09Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 439 Views

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 allow unauthenticated attackers to obtain a user's API ke

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2022-36923	11 Aug 202200:26	–	circl
CNNVD	多款ZOHO ManageEngine产品安全漏洞	10 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-36923	10 Aug 202214:17	–	cvelist
EUVD	EUVD-2022-39581	3 Oct 202520:07	–	euvd
Tenable Nessus	ManageEngine Firewall Analyzer 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 Authenticate Bypass	26 Aug 202200:00	–	nessus
Tenable Nessus	ManageEngine Firewall Analyzer REST API Key Disclosure (CVE-2022-36923)	24 Feb 202300:00	–	nessus
Tenable Nessus	ManageEngine NCM 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 Authenticate Bypass	26 Aug 202200:00	–	nessus
Tenable Nessus	ManageEngine NetFlow Analyzer 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 Authenticate Bypass	4 Dec 202300:00	–	nessus
Tenable Nessus	ManageEngine OpManager 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 Authenticate Bypass	26 Aug 202200:00	–	nessus
Nuclei	Zoho ManageEngine - getUserAPIKey Authentication Bypass	6 Jun 202603:01	–	nuclei

NVD

Node

zohocorp manageengine_firewall_analyzerMatch12.5build125450

OR

zohocorp manageengine_firewall_analyzerMatch12.5build125451

OR

zohocorp manageengine_firewall_analyzerMatch12.5build125452

OR

zohocorp manageengine_firewall_analyzerMatch12.5build125453

OR

zohocorp manageengine_firewall_analyzerMatch12.5build125455

OR

zohocorp manageengine_firewall_analyzerMatch12.5build125456

OR

zohocorp manageengine_firewall_analyzerMatch12.5build125664

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126000

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126001

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126100

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126101

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126102

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126103

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126113

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126114

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126115

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126116

OR

zohocorp manageengine_firewall_analyzerMatch12.6build126117

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125450

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125451

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125452

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125453

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125455

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125456

OR

zohocorp manageengine_netflow_analyzerMatch12.5build125664

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126000

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126001

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126100

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126101

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126102

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126103

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126113

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126114

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126115

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126116

OR

zohocorp manageengine_netflow_analyzerMatch12.6build126117

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125450

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125451

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125452

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125453

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125455

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125456

OR

zohocorp manageengine_network_configuration_managerMatch12.5build125664

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126000

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126001

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126100

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126101

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126102

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126103

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126113

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126114

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126115

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126116

OR

zohocorp manageengine_network_configuration_managerMatch12.6build126117

OR

zohocorp manageengine_opmanagerMatch12.5build125450

OR

zohocorp manageengine_opmanagerMatch12.5build125451

OR

zohocorp manageengine_opmanagerMatch12.5build125452

OR

zohocorp manageengine_opmanagerMatch12.5build125453

OR

zohocorp manageengine_opmanagerMatch12.5build125455

OR

zohocorp manageengine_opmanagerMatch12.5build125456

OR

zohocorp manageengine_opmanagerMatch12.5build125664

OR

zohocorp manageengine_opmanagerMatch12.6build126000

OR

zohocorp manageengine_opmanagerMatch12.6build126001

OR

zohocorp manageengine_opmanagerMatch12.6build126100

OR

zohocorp manageengine_opmanagerMatch12.6build126101

OR

zohocorp manageengine_opmanagerMatch12.6build126102

OR

zohocorp manageengine_opmanagerMatch12.6build126103

OR

zohocorp manageengine_opmanagerMatch12.6build126113

OR

zohocorp manageengine_opmanagerMatch12.6build126114

OR

zohocorp manageengine_opmanagerMatch12.6build126115

OR

zohocorp manageengine_opmanagerMatch12.6build126116

OR

zohocorp manageengine_opmanagerMatch12.6build126117

OR

zohocorp manageengine_opmanager_mspMatch12.5build125450

OR

zohocorp manageengine_opmanager_mspMatch12.5build125656

OR

zohocorp manageengine_opmanager_mspMatch12.5build125664

OR

zohocorp manageengine_opmanager_mspMatch12.6build126000

OR

zohocorp manageengine_opmanager_mspMatch12.6build126001

OR

zohocorp manageengine_opmanager_mspMatch12.6build126100

OR

zohocorp manageengine_opmanager_mspMatch12.6build126103

OR

zohocorp manageengine_opmanager_mspMatch12.6build126113

OR

zohocorp manageengine_opmanager_mspMatch12.6build126117

OR

zohocorp manageengine_opmanager_plusMatch12.5build125450

OR

zohocorp manageengine_opmanager_plusMatch12.5build125656

OR

zohocorp manageengine_opmanager_plusMatch12.5build125664

OR

zohocorp manageengine_opmanager_plusMatch12.6build126000

OR

zohocorp manageengine_opmanager_plusMatch12.6build126001

OR

zohocorp manageengine_opmanager_plusMatch12.6build126100

OR

zohocorp manageengine_opmanager_plusMatch12.6build126103

OR

zohocorp manageengine_opmanager_plusMatch12.6build126113

OR

zohocorp manageengine_opmanager_plusMatch12.6build126117

OR

zohocorp manageengine_oputilsMatch12.5build125450

OR

zohocorp manageengine_oputilsMatch12.5build125451

OR

zohocorp manageengine_oputilsMatch12.5build125452

OR

zohocorp manageengine_oputilsMatch12.5build125453

OR

zohocorp manageengine_oputilsMatch12.5build125455

OR

zohocorp manageengine_oputilsMatch12.5build125456

OR

zohocorp manageengine_oputilsMatch12.5build125664

OR

zohocorp manageengine_oputilsMatch12.6build126000

OR

zohocorp manageengine_oputilsMatch12.6build126001

OR

zohocorp manageengine_oputilsMatch12.6build126100

OR

zohocorp manageengine_oputilsMatch12.6build126101

OR

zohocorp manageengine_oputilsMatch12.6build126102

OR

zohocorp manageengine_oputilsMatch12.6build126103

OR

zohocorp manageengine_oputilsMatch12.6build126113

OR

zohocorp manageengine_oputilsMatch12.6build126114

OR

zohocorp manageengine_oputilsMatch12.6build126115

OR

zohocorp manageengine_oputilsMatch12.6build126116

OR

zohocorp manageengine_oputilsMatch12.6build126117

Source	Link
manageengine	www.manageengine.com/itom/advisory/cve-2022-36923.html

24 Sep 2025 19:43Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.4 - 7.5

EPSS0.26837

SSVC

CWE-755 CWE-284 In Wild

zoho manageengine opmanager opmanager plus opmanager msp network configuration manager netflow analyzer firewall analyzer oputils cve-2022-36923 nvd api key unauthenticated attackers