MN
Product
ManageEngine Network Configuration Manager
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 2Low 0
Watch
Add ManageEngine Network Configuration Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-43319 | 9.8 | Nov 30 | Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality Affected: 11.0; 11.0; 12.0; 12.0; 12.1; 12.1; +34 more |
| CVE-2021-41081 | 9.8 | Nov 11 | Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search Affected: 12.4 before 12.5; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2021-41080 | 9.8 | Nov 11 | Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search Affected: 12.4 before 12.5; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2023-29505 | 8.8 | Aug 4 | An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165 Affected: 12.6 |
| CVE-2022-38772 | 8.8 | Aug 29 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2022-37024 | 8.8 | Aug 9 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003,… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more |
| CVE-2023-47211 | 8.6 | Jan 8 | A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258 Affected: before 12.7; 12.7; 12.7; 12.7; 12.7; 12.7; +2 more |
| CVE-2022-35404 | 8.2 | Jul 18 | ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 11.0 |
| CVE-2026-12370 | 7.6 | Sep 23 | Remote Code Execution Vulnerability Affected: before 12.8.668 |
| CVE-2026-15358 | 7.5 | Sep 23 | Path Traversal Vulnerability Affected: before 12.8.671 |
| CVE-2022-36923 | 7.5 | Aug 10 | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28… Affected: 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +12 more |
| CVE-2018-18980 | 7.5 | Nov 6 | An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a… Affected: before 12.3.214 |
| CVE-2018-12997 | 7.5 | Jun 29 | Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before… Affected: All versions, or not specified |
| CVE-2018-12998 | 6.1 | Jun 29 | A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before… Affected: All versions, or not specified |
| CVE-2023-6105 | 5.5 | Nov 15 | ManageEngine Information Disclosure in Multiple Products Affected: before 12.5; 12.5; 12.5; 12.5; 12.5; 12.5; +34 more |
Showing 16