Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_opmanager:11.6:*:*:*:*:*:*:*

part: a version: 11.6 update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Opmanager (2325af94-7fc7-577f-bf28-675a973224ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-9107 vulnerable 2026-06-08 05:07:12.709781 Details available
Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor.
Published: 2017-08-04T00:00:00.000Z
Updated: 2024-08-06T08:36:31.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7766 vulnerable 2026-06-08 05:07:01.882526 Details available
PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as demonstrated by "INSERT/**/INTO."
Published: 2015-10-09T14:00:00.000Z
Updated: 2024-09-17T01:10:42.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.