CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

PT-2026-97289

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.671 ManageEngine Network Configuration Manager versions prior to 12.8.671 Description An unauthorized Path Traversal issue exists, which allows an attacker to access files and directories outside t...

CVE-2026-12370: Improper Neutralization of Special Elements Used in a Template Engine

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution...

PT-2026-97280

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions prior to 12.8.668 ManageEngine NetFlow Analyzer versions prior to 12.8.668 ManageEngine Network Configuration Manager versions prior to 12.8.668 Description Server-Side Template Injection SSTI occurs during...

CVE-2021-41081

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...

CVE-2023-29505: Origin Validation Error

An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

PT-2021-23809

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager versions prior to 125488 Description The issue is related to command injection due to improper validation in the Ping functionality. This allows for potential exploitation. No information is...

CVE-2021-43319: Improper Neutralization of Special Elements used in a Command

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

CVE-2021-41081: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search...

CVE-2021-41080: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search...

ManageEngine Network Configuration Manager 12.2 SQL Injection

Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...

ManageEngine Network Configuration Manager 12.2 - apiKey SQL Injection

ManageEngine Network Configuration Manager 12.2 - apiKey SQL Injection Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage:...

ManageEngine Network Configuration Manager 12.2 - (apiKey) SQL Injection Vulnerability

Exploit for java platform in category web applications Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...

ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection

Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...

PT-2018-14750

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager and OpManager versions prior to 12.3.214 Description A vulnerability exists that allows for XML External Entity injection XXE via the RequestXML parameter in a "/devices/ProcessRequest.do" API...

CVE-2018-18980: Improper Restriction of XML External Entity Reference

An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...

ManageEngine Network Configuration Manager Detection (HTTP)

HTTP based detection of ManageEngine Network Configuration Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ManageEngine Network Configuration Management Build 11000 - Privilege Escalation

Exploit for multiple platform in category web applications =================================================================================== Privilege escalation Vulnerability in ManageEngine Network Configuration Management...

ManageEngine Network Configuration Management Build 11000 - Privilege Escalation

ManageEngine Network Configuration Management Build 11000 - Privilege Escalation =================================================================================== Privilege escalation Vulnerability in ManageEngine Network Configuration Management...