GCVE - cpe:2.3:a:zohocorp:manageengine_netflow

Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zohocorp (`4f1ab088-ab0e-54ac-b0dc-2304879a7502`)
Product	Manageengine Netflow Analyzer (`416246d7-4293-566a-9c10-cb82f3af80b6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-12370`	vulnerable	2026-10-13 12:28:39.928803	Remote Code Execution Vulnerability HIGH (7.6) ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution. Published: 2026-09-23T11:20:09.186Z Updated: 2026-09-24T13:12:01.641Z Open on db.gcve.eu Reference links https://www.manageengine.com/itom/advisory/cve-2026-12370.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9226`	vulnerable	2026-06-08 07:45:21.918034	Stored XSS MEDIUM (4.6) Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details. Published: 2026-01-30T13:42:21.337Z Updated: 2026-02-02T16:32:34.271Z Open on db.gcve.eu Reference links https://www.manageengine.com/itom/advisory/cve-2025-9226.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6105`	vulnerable	2026-06-08 06:19:46.096334	ManageEngine Information Disclosure in Multiple Products MEDIUM (5.5) An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database. Published: 2023-11-15T20:57:47.981Z Updated: 2025-02-13T17:26:03.759Z Open on db.gcve.eu Reference links https://www.tenable.com/security/research/tra-2023-35 https://www.manageengine.com/security/advisory/CVE/CVE-2023-6105.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47211`	vulnerable	2026-06-08 06:14:24.283729	Details available CRITICAL (9.1) A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. Published: 2024-01-08T14:45:37.183Z Updated: 2025-11-04T18:19:03.852Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851 https://www.manageengine.com/itom/advisory/cve-2023-47211.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-35404`	vulnerable	2026-06-08 05:46:04.785468	Details available ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine. Published: 2022-07-18T12:25:32.000Z Updated: 2024-08-03T09:36:44.178Z Open on db.gcve.eu Reference links https://manageengine.com https://www.manageengine.com/itom/advisory/cve-2022-35404.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5445`	vulnerable	2026-06-08 05:05:47.937868	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Manageengine Netflow Analyzer

Notes

PURL mappings

Vulnerability references

Contribute