Known vulnerabilities in Zoho ManageEngine OpManager - page 5

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_opmanager:*:*:*:*:*:*:*:*
Total vulnerabilities: 106
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zoho ManageEngine OpManager Zoho ManageEngine OpManager is affected by 106 known vulnerabilities: 17 high, 42 medium, 47 low Critical High Medium Low

Vulnerabilities (106)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53233 - Missing release of memory after effective lifetime
CVE-2021-32029
CWE-401 Medium
No
No
12.5 125397 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 18 more
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028
CWE-401 Medium
No
No
12.5 125397 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027
CWE-190 Medium
No
No
12.5 125397 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU52332 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125378 19.04.2021 SB2021041917
#VU51384 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20078
CWE-22 Medium
No
No
12.5 125362 10.03.2021 SB2021031019
#VU48437 - Improper Access Control
CVE-2020-25694
CWE-284 Medium
No
No
12.5 125397 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696
CWE-20 Medium
No
No
12.5 125397 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU45749 - Untrusted Search Path
CVE-2020-14350
CWE-426 Medium
No
No
12.5 125397 18.08.2020 SB2020081801
SB2020081802
SB2020081803
and 31 more
#VU45748 - Untrusted Search Path
CVE-2020-14349
CWE-426 Medium
No
No
12.5 125397 18.08.2020 SB2020081801
SB2020081803
SB2020082205
and 23 more
#VU30587 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.5 125177 17.07.2020 SB2020071714
#VU29708 - Improper input validation
CWE-20 High
No
No
12.5 125176 14.07.2020 SB2020071402
#VU29287 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
12.5 125127 25.06.2020 SB2020062508
#VU27697 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-12116
CWE-22 Medium
Available
No
12.4 124196, 12.5 125125 12.05.2020 SB2020051202
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
12.5 125212 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
12.5 125212 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25333 - Improper Authorization
CVE-2020-1720
CWE-285 Low
No
No
12.5 125127 13.02.2020 SB2020021329
SB2020021411
SB2020021412
and 21 more
#VU22785 - Permissions, Privileges, and Access Controls
CVE-2019-3466
CWE-264 Low
No
No
12.5 125127 15.11.2019 SB2019111437
SB2019111501
SB2019111514
and 2 more
#VU21880 - Improper Authentication
CVE-2019-15106
CWE-287 High
No
No
12.4 124062, 12.4 124070 16.10.2019 SB2019081610
#VU21864 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-17602
CWE-89 High
No
No
12.4 124089 16.10.2019 SB2019101604
#VU16699 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-20338
CWE-89 Low
No
No
12.3.123239 25.12.2018 SB2018122506


Showing elements 81 - 100 out of 106