Manageengine Opmanager Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_opmanager_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Opmanager Plus (ec303168-0e11-5f6d-ba98-5bb2b2770a0b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6748 |
vulnerable | 2026-06-08 06:58:20.343741 |
SQL Injection
HIGH (8.3)
Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring.
Published: 2024-07-29T16:20:16.449Z
Updated: 2024-08-01T21:41:04.605Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5466 |
vulnerable | 2026-06-08 06:56:16.106640 |
Remote Code Execution
HIGH (8.8)
Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.
Published: 2024-08-23T13:23:22.144Z
Updated: 2024-08-23T15:37:32.493Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47211 |
vulnerable | 2026-06-08 06:14:24.361206 |
Details available
CRITICAL (9.1)
A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
Published: 2024-01-08T14:45:37.183Z
Updated: 2025-11-04T18:19:03.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43473 |
vulnerable | 2026-06-08 05:49:32.080433 |
Details available
MEDIUM (5.8)
A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve
a malicious XML payload to trigger this vulnerability.
Published: 2023-03-30T16:28:35.983Z
Updated: 2025-02-11T19:14:03.416Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.