Remote code execution

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

CVE-2020-28653

Affected software/overview: ManageEngine OpManager SumPDU Java Deserialization vulnerability in OpManager, 12.1 to 12.5.x (before 125203; released before 125233). Root cause / vulnerability type: Untrusted Java object deserialization in the SumPDU servlet allows remote code execution (pre-auth). ...