high8.8
CVE-2022-38772
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126…
Impact
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Netflow Analyzer | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Network Configuration Manager | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Opmanager | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Opmanager Msp | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Opmanager Plus | Versions 12.5, 12.6 |
| Zohocorp | Manageengine Oputils | Versions 12.5, 12.6 |