Zohocorp Manageengine Opmanager vulnerabilities
67 known vulnerabilities affecting zohocorp/manageengine_opmanager.
Total CVEs
67
CISA KEV
0
Public exploits
16
Exploited in wild
4
Severity breakdown
CRITICAL20HIGH33MEDIUM14
Vulnerabilities
Page 4 of 4
CVE-2018-18716P4MEDIUMCVSS 6.1v11.4v11.5+1 more2018-11-20
CVE-2018-18716 [MEDIUM] CWE-79 CVE-2018-18716: Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.
nvd
CVE-2023-6105P4MEDIUMCVSS 5.5fixed in 12.5v12.5+2 more2023-11-15
CVE-2023-6105 [MEDIUM] CWE-200 CVE-2023-6105: An information disclosure vulnerability exists in multiple ManageEngine products that can result in
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine pr
nvd
CVE-2018-18262P4MEDIUMCVSS 6.1v12.32018-10-17
CVE-2018-18262 [MEDIUM] CWE-79 CVE-2018-18262: Zoho ManageEngine OpManager 12.3 before build 123214 has XSS.
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS.
nvd
CVE-2018-19921P4MEDIUMCVSS 6.1v11.4v11.5+7 more2018-12-06
CVE-2018-19921 [MEDIUM] CWE-79 CVE-2018-19921: Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.
nvd
CVE-2017-11560P4MEDIUMCVSS 5.4v12.22019-05-23
CVE-2017-11560 [MEDIUM] CWE-79 CVE-2017-11560: An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the applicati
An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload an HTML file. This HTML file is then rendered in various locations of the application. JavaScript inside the uploaded HTML is also interpreted by the application. Thus, an attacker can inject a malicious JavaScript
nvd
CVE-2018-20339P4MEDIUMCVSS 6.1v12.32018-12-21
CVE-2018-20339 [MEDIUM] CWE-79 CVE-2018-20339: Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms se
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.
nvd
CVE-2025-9226P4MEDIUMCVSS 4.6fixed in 1285822026-01-30
CVE-2025-9226 [MEDIUM] CWE-79 CVE-2025-9226: Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected
Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details.
nvd
← Previous4 / 4