high8.8
CVE-2022-37024
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 (…
Impact
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Firewall Analyzer | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Netflow Analyzer | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Network Configuration Manager | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Opmanager | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Opmanager Msp | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Opmanager Plus | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Oputils | Versions 12.5, 12.6 |