CVE-2022-35404
published 2022-07-18CVE-2022-35404: ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
PriorityP348high8.2CVSS 3.1
AVNACLPRNUINSUCNILAH
EPSS
3.81%
88.7th percentile
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zohocorp | manageengine_firewall_analyzer | < 12.5 | 12.5 |
| zohocorp | manageengine_firewall_analyzer | — | — |
| zohocorp | manageengine_netflow_analyzer | < 12.5 | 12.5 |
| zohocorp | manageengine_netflow_analyzer | — | — |
| zohocorp | manageengine_network_configuration_manager | < 12.5 | 12.5 |
| zohocorp | manageengine_network_configuration_manager | — | — |
| zohocorp | manageengine_opmanager | < 12.5 | 12.5 |
| zohocorp | manageengine_opmanager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-07-18
Published