CVEvulnerability

CVE-2022-38772

8.8 HIGH Published 2022-08-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

Affected configurations

• zohocorp manageengine netflow analyzer 12.5 • zohocorp manageengine netflow analyzer 12.6 • zohocorp manageengine network configuration manager 12.5 • zohocorp manageengine network configuration manager 12.6 • zohocorp manageengine opmanager 12.5 • zohocorp manageengine opmanager 12.6 • zohocorp manageengine opmanager msp 12.5 • zohocorp manageengine opmanager msp 12.6 • zohocorp manageengine opmanager plus 12.5 • zohocorp manageengine opmanager plus 12.6 • zohocorp manageengine oputils 12.5 • zohocorp manageengine oputils 12.6

References