Lucene search

[email protected]CVE-2022-38772

HistoryAug 29, 2022 - 9:15 p.m.

CVE-2022-38772

2022-08-2921:15:09

[email protected]

web.nvd.nist.gov

cve-2022-38772

zoho manageengine

opmanager

opmanager plus

opmanager msp

network configuration manager

netflow analyzer

oputils

authenticated users

database changes

remote code execution

nmap

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.4%

JSON

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

Affected configurations

NVD

Node

zohocorpmanageengine_netflow_analyzerMatch12.5build125450

zohocorpmanageengine_netflow_analyzerMatch12.5build125451

zohocorpmanageengine_netflow_analyzerMatch12.5build125452

zohocorpmanageengine_netflow_analyzerMatch12.5build125453

zohocorpmanageengine_netflow_analyzerMatch12.5build125455

zohocorpmanageengine_netflow_analyzerMatch12.5build125456

zohocorpmanageengine_netflow_analyzerMatch12.5build125459

zohocorpmanageengine_netflow_analyzerMatch12.5build125464

zohocorpmanageengine_netflow_analyzerMatch12.5build125467

zohocorpmanageengine_netflow_analyzerMatch12.5build125469

zohocorpmanageengine_netflow_analyzerMatch12.5build125471

zohocorpmanageengine_netflow_analyzerMatch12.5build125476

zohocorpmanageengine_netflow_analyzerMatch12.5build125482

zohocorpmanageengine_netflow_analyzerMatch12.5build125483

zohocorpmanageengine_netflow_analyzerMatch12.5build125484

zohocorpmanageengine_netflow_analyzerMatch12.5build125485

zohocorpmanageengine_netflow_analyzerMatch12.5build125488

zohocorpmanageengine_netflow_analyzerMatch12.5build125490

zohocorpmanageengine_netflow_analyzerMatch12.5build125557

zohocorpmanageengine_netflow_analyzerMatch12.5build125566

zohocorpmanageengine_netflow_analyzerMatch12.5build125568

zohocorpmanageengine_netflow_analyzerMatch12.5build125582

zohocorpmanageengine_netflow_analyzerMatch12.5build125584

zohocorpmanageengine_netflow_analyzerMatch12.5build125585

zohocorpmanageengine_netflow_analyzerMatch12.5build125606

zohocorpmanageengine_netflow_analyzerMatch12.5build125615

zohocorpmanageengine_netflow_analyzerMatch12.5build125647

zohocorpmanageengine_netflow_analyzerMatch12.5build125656

zohocorpmanageengine_netflow_analyzerMatch12.5build125657

zohocorpmanageengine_netflow_analyzerMatch12.5build125664

zohocorpmanageengine_netflow_analyzerMatch12.6build126000

zohocorpmanageengine_netflow_analyzerMatch12.6build126001

zohocorpmanageengine_netflow_analyzerMatch12.6build126100

zohocorpmanageengine_netflow_analyzerMatch12.6build126101

zohocorpmanageengine_netflow_analyzerMatch12.6build126102

zohocorpmanageengine_netflow_analyzerMatch12.6build126113

zohocorpmanageengine_netflow_analyzerMatch12.6build126114

zohocorpmanageengine_netflow_analyzerMatch12.6build126115

zohocorpmanageengine_netflow_analyzerMatch12.6build126116

zohocorpmanageengine_netflow_analyzerMatch12.6build126117

zohocorpmanageengine_netflow_analyzerMatch12.6build126118

zohocorpmanageengine_netflow_analyzerMatch12.6build126119

zohocorpmanageengine_network_configuration_managerMatch12.5build125450

zohocorpmanageengine_network_configuration_managerMatch12.5build125451

zohocorpmanageengine_network_configuration_managerMatch12.5build125452

zohocorpmanageengine_network_configuration_managerMatch12.5build125453

zohocorpmanageengine_network_configuration_managerMatch12.5build125455

zohocorpmanageengine_network_configuration_managerMatch12.5build125456

zohocorpmanageengine_network_configuration_managerMatch12.5build125459

zohocorpmanageengine_network_configuration_managerMatch12.5build125465

zohocorpmanageengine_network_configuration_managerMatch12.5build125469

zohocorpmanageengine_network_configuration_managerMatch12.5build125471

zohocorpmanageengine_network_configuration_managerMatch12.5build125475

zohocorpmanageengine_network_configuration_managerMatch12.5build125482

zohocorpmanageengine_network_configuration_managerMatch12.5build125483

zohocorpmanageengine_network_configuration_managerMatch12.5build125485

zohocorpmanageengine_network_configuration_managerMatch12.5build125488

zohocorpmanageengine_network_configuration_managerMatch12.5build125490

zohocorpmanageengine_network_configuration_managerMatch12.5build125565

zohocorpmanageengine_network_configuration_managerMatch12.5build125568

zohocorpmanageengine_network_configuration_managerMatch12.5build125583

zohocorpmanageengine_network_configuration_managerMatch12.5build125584

zohocorpmanageengine_network_configuration_managerMatch12.5build125598

zohocorpmanageengine_network_configuration_managerMatch12.5build125612

zohocorpmanageengine_network_configuration_managerMatch12.5build125615

zohocorpmanageengine_network_configuration_managerMatch12.5build125617

zohocorpmanageengine_network_configuration_managerMatch12.5build125646

zohocorpmanageengine_network_configuration_managerMatch12.5build125650

zohocorpmanageengine_network_configuration_managerMatch12.5build125656

zohocorpmanageengine_network_configuration_managerMatch12.5build125657

zohocorpmanageengine_network_configuration_managerMatch12.5build125664

zohocorpmanageengine_network_configuration_managerMatch12.6build126000

zohocorpmanageengine_network_configuration_managerMatch12.6build126001

zohocorpmanageengine_network_configuration_managerMatch12.6build126002

zohocorpmanageengine_network_configuration_managerMatch12.6build126100

zohocorpmanageengine_network_configuration_managerMatch12.6build126101

zohocorpmanageengine_network_configuration_managerMatch12.6build126102

zohocorpmanageengine_network_configuration_managerMatch12.6build126103

zohocorpmanageengine_network_configuration_managerMatch12.6build126104

zohocorpmanageengine_network_configuration_managerMatch12.6build126113

zohocorpmanageengine_network_configuration_managerMatch12.6build126114

zohocorpmanageengine_network_configuration_managerMatch12.6build126115

zohocorpmanageengine_network_configuration_managerMatch12.6build126116

zohocorpmanageengine_network_configuration_managerMatch12.6build126117

zohocorpmanageengine_network_configuration_managerMatch12.6build126118

zohocorpmanageengine_network_configuration_managerMatch12.6build126119

zohocorpmanageengine_opmanagerMatch12.5build125450

zohocorpmanageengine_opmanagerMatch12.5build125451

zohocorpmanageengine_opmanagerMatch12.5build125452

zohocorpmanageengine_opmanagerMatch12.5build125453

zohocorpmanageengine_opmanagerMatch12.5build125455

zohocorpmanageengine_opmanagerMatch12.5build125456

zohocorpmanageengine_opmanagerMatch12.5build125457

zohocorpmanageengine_opmanagerMatch12.5build125466

zohocorpmanageengine_opmanagerMatch12.5build125467

zohocorpmanageengine_opmanagerMatch12.5build125468

zohocorpmanageengine_opmanagerMatch12.5build125469

zohocorpmanageengine_opmanagerMatch12.5build125470

zohocorpmanageengine_opmanagerMatch12.5build125476

zohocorpmanageengine_opmanagerMatch12.5build125482

zohocorpmanageengine_opmanagerMatch12.5build125483

zohocorpmanageengine_opmanagerMatch12.5build125485

zohocorpmanageengine_opmanagerMatch12.5build125486

zohocorpmanageengine_opmanagerMatch12.5build125487

zohocorpmanageengine_opmanagerMatch12.5build125488

zohocorpmanageengine_opmanagerMatch12.5build125489

zohocorpmanageengine_opmanagerMatch12.5build125567

zohocorpmanageengine_opmanagerMatch12.5build125568

zohocorpmanageengine_opmanagerMatch12.5build125587

zohocorpmanageengine_opmanagerMatch12.5build125588

zohocorpmanageengine_opmanagerMatch12.5build125589

zohocorpmanageengine_opmanagerMatch12.5build125597

zohocorpmanageengine_opmanagerMatch12.5build125598

zohocorpmanageengine_opmanagerMatch12.5build125599

zohocorpmanageengine_opmanagerMatch12.5build125601

zohocorpmanageengine_opmanagerMatch12.5build125603

zohocorpmanageengine_opmanagerMatch12.5build125604

zohocorpmanageengine_opmanagerMatch12.5build125605

zohocorpmanageengine_opmanagerMatch12.5build125611

zohocorpmanageengine_opmanagerMatch12.5build125612

zohocorpmanageengine_opmanagerMatch12.5build125613

zohocorpmanageengine_opmanagerMatch12.5build125614

zohocorpmanageengine_opmanagerMatch12.5build125615

zohocorpmanageengine_opmanagerMatch12.5build125616

zohocorpmanageengine_opmanagerMatch12.5build125617

zohocorpmanageengine_opmanagerMatch12.5build125628

zohocorpmanageengine_opmanagerMatch12.5build125629

zohocorpmanageengine_opmanagerMatch12.5build125630

zohocorpmanageengine_opmanagerMatch12.5build125631

zohocorpmanageengine_opmanagerMatch12.5build125632

zohocorpmanageengine_opmanagerMatch12.5build125634

zohocorpmanageengine_opmanagerMatch12.5build125635

zohocorpmanageengine_opmanagerMatch12.5build125638

zohocorpmanageengine_opmanagerMatch12.5build125639

zohocorpmanageengine_opmanagerMatch12.5build125645

zohocorpmanageengine_opmanagerMatch12.5build125648

zohocorpmanageengine_opmanagerMatch12.5build125649

zohocorpmanageengine_opmanagerMatch12.5build125651

zohocorpmanageengine_opmanagerMatch12.5build125652

zohocorpmanageengine_opmanagerMatch12.5build125653

zohocorpmanageengine_opmanagerMatch12.5build125654

zohocorpmanageengine_opmanagerMatch12.5build125655

zohocorpmanageengine_opmanagerMatch12.5build125656

zohocorpmanageengine_opmanagerMatch12.5build125657

zohocorpmanageengine_opmanagerMatch12.5build125664

zohocorpmanageengine_opmanagerMatch12.6build126000

zohocorpmanageengine_opmanagerMatch12.6build126001

zohocorpmanageengine_opmanagerMatch12.6build126002

zohocorpmanageengine_opmanagerMatch12.6build126100

zohocorpmanageengine_opmanagerMatch12.6build126101

zohocorpmanageengine_opmanagerMatch12.6build126102

zohocorpmanageengine_opmanagerMatch12.6build126103

zohocorpmanageengine_opmanagerMatch12.6build126104

zohocorpmanageengine_opmanagerMatch12.6build126113

zohocorpmanageengine_opmanagerMatch12.6build126114

zohocorpmanageengine_opmanagerMatch12.6build126115

zohocorpmanageengine_opmanagerMatch12.6build126116

zohocorpmanageengine_opmanagerMatch12.6build126117

zohocorpmanageengine_opmanagerMatch12.6build126118

zohocorpmanageengine_opmanagerMatch12.6build126119

zohocorpmanageengine_opmanager_mspMatch12.5build125450

zohocorpmanageengine_opmanager_mspMatch12.5build125656

zohocorpmanageengine_opmanager_mspMatch12.5build125657

zohocorpmanageengine_opmanager_mspMatch12.5build125664

zohocorpmanageengine_opmanager_mspMatch12.6build126000

zohocorpmanageengine_opmanager_mspMatch12.6build126001

zohocorpmanageengine_opmanager_mspMatch12.6build126002

zohocorpmanageengine_opmanager_mspMatch12.6build126100

zohocorpmanageengine_opmanager_mspMatch12.6build126103

zohocorpmanageengine_opmanager_mspMatch12.6build126104

zohocorpmanageengine_opmanager_mspMatch12.6build126113

zohocorpmanageengine_opmanager_mspMatch12.6build126117

zohocorpmanageengine_opmanager_mspMatch12.6build126119

zohocorpmanageengine_opmanager_plusMatch12.5build125450

zohocorpmanageengine_opmanager_plusMatch12.5build125656

zohocorpmanageengine_opmanager_plusMatch12.5build125657

zohocorpmanageengine_opmanager_plusMatch12.5build125664

zohocorpmanageengine_opmanager_plusMatch12.6build126000

zohocorpmanageengine_opmanager_plusMatch12.6build126001

zohocorpmanageengine_opmanager_plusMatch12.6build126002

zohocorpmanageengine_opmanager_plusMatch12.6build126100

zohocorpmanageengine_opmanager_plusMatch12.6build126103

zohocorpmanageengine_opmanager_plusMatch12.6build126104

zohocorpmanageengine_opmanager_plusMatch12.6build126113

zohocorpmanageengine_opmanager_plusMatch12.6build126117

zohocorpmanageengine_opmanager_plusMatch12.6build126119

zohocorpmanageengine_oputilsMatch12.5build125450

zohocorpmanageengine_oputilsMatch12.5build125451

zohocorpmanageengine_oputilsMatch12.5build125452

zohocorpmanageengine_oputilsMatch12.5build125453

zohocorpmanageengine_oputilsMatch12.5build125455

zohocorpmanageengine_oputilsMatch12.5build125456

zohocorpmanageengine_oputilsMatch12.5build125657

zohocorpmanageengine_oputilsMatch12.5build125664

zohocorpmanageengine_oputilsMatch12.6build126000

zohocorpmanageengine_oputilsMatch12.6build126001

zohocorpmanageengine_oputilsMatch12.6build126002

zohocorpmanageengine_oputilsMatch12.6build126100

zohocorpmanageengine_oputilsMatch12.6build126101

zohocorpmanageengine_oputilsMatch12.6build126102

zohocorpmanageengine_oputilsMatch12.6build126103

zohocorpmanageengine_oputilsMatch12.6build126104

zohocorpmanageengine_oputilsMatch12.6build126113

zohocorpmanageengine_oputilsMatch12.6build126114

zohocorpmanageengine_oputilsMatch12.6build126115

zohocorpmanageengine_oputilsMatch12.6build126116

zohocorpmanageengine_oputilsMatch12.6build126117

zohocorpmanageengine_oputilsMatch12.6build126119

CPENameOperatorVersion
zohocorp:manageengine_netflow_analyzerzohocorp manageengine netflow analyzereq12.5
zohocorp:manageengine_netflow_analyzerzohocorp manageengine netflow analyzereq12.6
zohocorp:manageengine_network_configuration_managerzohocorp manageengine network configuration managereq12.5
zohocorp:manageengine_network_configuration_managerzohocorp manageengine network configuration managereq12.6
zohocorp:manageengine_opmanagerzohocorp manageengine opmanagereq12.5
zohocorp:manageengine_opmanagerzohocorp manageengine opmanagereq12.6
zohocorp:manageengine_opmanager_mspzohocorp manageengine opmanager mspeq12.5
zohocorp:manageengine_opmanager_mspzohocorp manageengine opmanager mspeq12.6
zohocorp:manageengine_opmanager_pluszohocorp manageengine opmanager pluseq12.5
zohocorp:manageengine_opmanager_pluszohocorp manageengine opmanager pluseq12.6

CPE	Name	Operator	Version
zohocorp:manageengine_netflow_analyzer	zohocorp manageengine netflow analyzer	eq	12.5
zohocorp:manageengine_netflow_analyzer	zohocorp manageengine netflow analyzer	eq	12.6
zohocorp:manageengine_network_configuration_manager	zohocorp manageengine network configuration manager	eq	12.5
zohocorp:manageengine_network_configuration_manager	zohocorp manageengine network configuration manager	eq	12.6
zohocorp:manageengine_opmanager	zohocorp manageengine opmanager	eq	12.5
zohocorp:manageengine_opmanager	zohocorp manageengine opmanager	eq	12.6
zohocorp:manageengine_opmanager_msp	zohocorp manageengine opmanager msp	eq	12.5
zohocorp:manageengine_opmanager_msp	zohocorp manageengine opmanager msp	eq	12.6
zohocorp:manageengine_opmanager_plus	zohocorp manageengine opmanager plus	eq	12.5
zohocorp:manageengine_opmanager_plus	zohocorp manageengine opmanager plus	eq	12.6

Rows per page:

1-10 of 121

References

manageengine.com

www.manageengine.com/itom/advisory/cve-2022-38772.html

Social References

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.4%

JSON

Related for CVE-2022-38772

zdi3 nvd1 cvelist1 prion1