Code injection

2022-08-2921:15:00

PRIOn knowledge base

www.prio-n.com

zoho manageengine

opmanager

opmanager plus

opmanager msp

network configuration manager

netflow analyzer

code injection

remote code execution

nvd

8.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.4%

JSON

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

CPENameOperatorVersion
manageengine_netflow_analyzereq12.5 build125566
manageengine_netflow_analyzereq12.5 build125557
manageengine_netflow_analyzereq12.5 build125490
manageengine_netflow_analyzereq12.5 build125488
manageengine_netflow_analyzereq12.5 build125485
manageengine_netflow_analyzereq12.5 build125484
manageengine_netflow_analyzereq12.5 build125483
manageengine_netflow_analyzereq12.5 build125482
manageengine_netflow_analyzereq12.5 build125476
manageengine_netflow_analyzereq12.5 build125471

Name	Operator	Version
manageengine_netflow_analyzer	eq	12.5 build125566
manageengine_netflow_analyzer	eq	12.5 build125557
manageengine_netflow_analyzer	eq	12.5 build125490
manageengine_netflow_analyzer	eq	12.5 build125488
manageengine_netflow_analyzer	eq	12.5 build125485
manageengine_netflow_analyzer	eq	12.5 build125484
manageengine_netflow_analyzer	eq	12.5 build125483
manageengine_netflow_analyzer	eq	12.5 build125482
manageengine_netflow_analyzer	eq	12.5 build125476
manageengine_netflow_analyzer	eq	12.5 build125471