Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_firewall_analyzer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Firewall Analyzer (75c03a6a-8b72-5de3-9350-0e3f8a1b9ed5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14913 vulnerable 2026-10-13 12:28:57.315310 SQL Injection vulnerability
HIGH (8.8)
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.
Published: 2026-09-23T11:28:25.842Z
Updated: 2026-09-24T03:55:23.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84787 vulnerable 2026-10-13 12:28:55.587063 Privilege Escalation vulnerability
HIGH (8.1)
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import.
Published: 2026-09-23T11:57:33.612Z
Updated: 2026-09-24T03:55:21.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84789 vulnerable 2026-10-13 12:28:55.584267 Broken Access Control vulnerability
HIGH (7.1)
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications for firewalls outside their assigned scope.
Published: 2026-09-23T11:51:43.342Z
Updated: 2026-09-23T12:43:29.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84791 vulnerable 2026-10-13 12:28:55.573399 Broken Access Control vulnerability
HIGH (7.1)
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.
Published: 2026-09-23T11:45:33.181Z
Updated: 2026-09-23T14:44:07.748Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76979 vulnerable 2026-10-13 12:28:36.589338 XML Injection vulnerability
HIGH (7.7)
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.
Published: 2026-09-23T12:22:49.382Z
Updated: 2026-09-23T16:46:14.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76980 vulnerable 2026-10-13 12:28:36.571976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76978 vulnerable 2026-10-13 12:28:36.499268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6105 vulnerable 2026-06-08 06:19:46.057448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47211 vulnerable 2026-06-08 06:14:24.275150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35404 vulnerable 2026-06-08 05:46:04.818291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7781 vulnerable 2026-06-08 05:07:01.918377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7780 vulnerable 2026-06-08 05:07:01.917957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.