Known vulnerabilities in Zoho ManageEngine OpManager - page 2

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_opmanager:*:*:*:*:*:*:*:*
Total vulnerabilities: 106
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zoho ManageEngine OpManager Zoho ManageEngine OpManager is affected by 106 known vulnerabilities: 17 high, 42 medium, 47 low Critical High Medium Low

Vulnerabilities (106)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64672 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.6 126101 24.06.2022 SB2022062447
#VU64671 - Improper Control of Filename for Include/Require Statement in PHP Program
CWE-98 High
No
No
12.5 125639, 12.5 125655, 12.6 126101 24.06.2022 SB2022062447
#VU63980 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125653 05.06.2022 SB2022060501
#VU63460 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125649 19.05.2022 SB2022051915
#VU63459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125649 19.05.2022 SB2022051915
#VU63458 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125649 19.05.2022 SB2022051915
#VU63226 - Improper Access Control
CWE-284 Low
No
No
12.5 125648 16.05.2022 SB2022051613
#VU62827 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125634 05.05.2022 SB2022050522
#VU62826 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
12.5 125634 05.05.2022 SB2022050522
#VU62634 - Improper Access Control
CWE-284 Low
No
No
12.5 125632 27.04.2022 SB2022042702
#VU62580 - Improper input validation
CWE-20 Medium
No
No
12.5 125631 26.04.2022 SB2022042603
#VU62578 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
12.5 125631 26.04.2022 SB2022042603
#VU62024 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
12.5 125629 08.04.2022 SB2022040814
#VU61633 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
12.5 125616 27.03.2022 SB2022032701
#VU61632 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27908
CWE-89 Medium
No
No
12.5 125616 27.03.2022 SB2022032701
#VU61522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
12.5 125614 22.03.2022 SB2022032203
#VU61521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
12.5 125614 22.03.2022 SB2022032203
#VU61520 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
12.5 125614 22.03.2022 SB2022032203
#VU58114 - Missing Encryption of Sensitive Data
CVE-2021-23222
CWE-311 Medium
No
No
12.5 125630 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 29 more
#VU58113 - Missing Encryption of Sensitive Data
CVE-2021-23214
CWE-311 Medium
No
No
12.5 125630 11.11.2021 SB2021111139
SB2021111708
SB2021111709
and 34 more


Showing elements 21 - 40 out of 106