Known vulnerabilities in Zoho ManageEngine OpManager 12.5 125192 - page 2

Version: 12.5 125192
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_opmanager:*:*:*:*:*:*:*:*
Total vulnerabilities: 37
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoho ManageEngine OpManager version 12.5 125192 Zoho ManageEngine OpManager 12.5 125192 is affected by 37 vulnerabilities: 8 high, 15 medium, 14 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56881 - Improper Access Control
CWE-284 Medium
No
No
12.5 125468 27.09.2021 SB2021092703
#VU56711 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-41288
CWE-89 Medium
No
No
12.5 125467 20.09.2021 SB2021092019
#VU56628 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125466 15.09.2021 SB2021091523
#VU56627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125466 15.09.2021 SB2021091523
#VU56290 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-40493
CWE-89 Medium
No
No
12.5 125453 03.09.2021 SB2021090303
#VU53233 - Missing release of memory after effective lifetime
CVE-2021-32029
CWE-401 Medium
No
No
12.5 125397 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 18 more
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028
CWE-401 Medium
No
No
12.5 125397 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027
CWE-190 Medium
No
No
12.5 125397 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU52332 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125378 19.04.2021 SB2021041917
#VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25695
CWE-89 Medium
No
No
12.5 125397 16.11.2020 SB2020111609
SB2020111711
SB2020111816
and 33 more
#VU48437 - Improper Access Control
CVE-2020-25694
CWE-284 Medium
No
No
12.5 125397 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696
CWE-20 Medium
No
No
12.5 125397 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU45749 - Untrusted Search Path
CVE-2020-14350
CWE-426 Medium
No
No
12.5 125397 18.08.2020 SB2020081801
SB2020081802
SB2020081803
and 31 more
#VU45748 - Untrusted Search Path
CVE-2020-14349
CWE-426 Medium
No
No
12.5 125397 18.08.2020 SB2020081801
SB2020081803
SB2020082205
and 23 more
#VU27923 - Untrusted Search Path
CVE-2020-10733
CWE-426 Low
No
No
12.5 125127, 12.5 125397 14.05.2020 SB2020051418
SB2020062508
SB2021052507
and 1 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Public exploit available
Exploited
12.5 125212 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Public exploit available
No
12.5 125212 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more


Showing elements 21 - 40 out of 37