GCVE - cpe:2.3:a:zohocorp:manageengine_oputils:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_oputils:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zohocorp (`4f1ab088-ab0e-54ac-b0dc-2304879a7502`)
Product	Manageengine Oputils (`a4d742a7-9a92-5eb0-ad5f-054e13418893`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9226`	vulnerable	2026-06-08 07:45:21.918984	Stored XSS MEDIUM (4.6) Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details. Published: 2026-01-30T13:42:21.337Z Updated: 2026-02-02T16:32:34.271Z Open on db.gcve.eu Reference links https://www.manageengine.com/itom/advisory/cve-2025-9226.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6105`	vulnerable	2026-06-08 06:19:46.019675	ManageEngine Information Disclosure in Multiple Products MEDIUM (5.5) An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database. Published: 2023-11-15T20:57:47.981Z Updated: 2025-02-13T17:26:03.759Z Open on db.gcve.eu Reference links https://www.tenable.com/security/research/tra-2023-35 https://www.manageengine.com/security/advisory/CVE/CVE-2023-6105.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47211`	vulnerable	2026-06-08 06:14:24.371536	Details available CRITICAL (9.1) A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. Published: 2024-01-08T14:45:37.183Z Updated: 2025-11-04T18:19:03.852Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851 https://www.manageengine.com/itom/advisory/cve-2023-47211.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.