Manageengine Netflow Analyzer
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Netflow Analyzer (416246d7-4293-566a-9c10-cb82f3af80b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9226 |
vulnerable | 2026-06-08 07:45:21.918034 |
Stored XSS
MEDIUM (4.6)
Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details.
Published: 2026-01-30T13:42:21.337Z
Updated: 2026-02-02T16:32:34.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6105 |
vulnerable | 2026-06-08 06:19:46.096334 |
ManageEngine Information Disclosure in Multiple Products
MEDIUM (5.5)
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
Published: 2023-11-15T20:57:47.981Z
Updated: 2025-02-13T17:26:03.759Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47211 |
vulnerable | 2026-06-08 06:14:24.283729 |
Details available
CRITICAL (9.1)
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
Published: 2024-01-08T14:45:37.183Z
Updated: 2025-11-04T18:19:03.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35404 |
vulnerable | 2026-06-08 05:46:04.785468 |
Details available
ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
Published: 2022-07-18T12:25:32.000Z
Updated: 2024-08-03T09:36:44.178Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5445 |
vulnerable | 2026-06-08 05:05:47.937868 |
Details available
Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2) CReportPDFServlet servlet.
Published: 2014-12-04T17:00:00.000Z
Updated: 2024-08-06T11:41:49.073Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.