CVE-2021-41288: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...

PT-2021-23242

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions 125466 and below Description The issue concerns SQL Injection in the getReportData API endpoint. This allows for potential exploitation. No information is provided about the estimated number of affected...

CVE-2020-19554

Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...

CVE-2020-19554

Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...

PT-2021-10369

Name of the Vulnerable Software and Affected Versions: ManageEngine OPManager versions prior to 12.5.175 Description: A Cross Site Scripting XSS issue exists when the API key contains an XML-based XSS payload. This allows for potential malicious script execution. Recommendations: For ManageEngine...

CVE-2020-19554: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in ManageEngine OPManager =12.5.174 when the API key contains an XML-based XSS payload...

ManageEngine OpManager SumPDU Java Deserialization

An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager component can be leveraged to deserialize an arbitrary Java object. This can be abused by an unauthenticated remote attacker to execute OS commands in the context of the OpManager application NT AUTHORITY\SYSTEM on Windows ...

CVE-2021-3287

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

CVE-2021-3287

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

Zoho ManageEngine OpManager 代码问题漏洞

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

PT-2021-19972

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.5.329 Description The issue allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class. Recommendations For versions prior to 12.5.329, update to version...

CVE-2021-3287: Deserialization of Untrusted Data

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

Zoho Corporation Manage Engine OpManager Path Traversal Vulnerability

Zoho Corporation ManageEngine OpManager is an application from Zoho Corporation, India. Continuously monitors the network and provides in-depth visibility and control over it. A path traversal vulnerability exists in Zoho Corporation Manage Engine OpManager, which can be exploited by an attacker ...

ManageEngine OpManager Smart Update Manager RCE

Binary data manageengineopmanagercve-2020-28653.nbin...

CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

ZOHO ManageEngine OpManager 安全漏洞

ZOHO ManageEngine OpManager is a network, server and virtualization monitoring software from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine OpManager Stable build before 125203, which can be exploited by attackers to remotely execute code via the Smart Update Manager SUM servlet...

CVE-2020-28653: Undefined Security Weakness

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

ManageEngine OpManager OpmSkipFilter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of ManageEngine OpManager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpmSkipFilter class. The issue results from the lack of proper...

ZOHO ManageEngine OpManager Path Traversal Vulnerability

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A security vulnerability exists in ZOHO ManageEngine OpManager versions prior to 125144. An attacker could use this vulnerability to bypass directory traversal validation...