Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4:*:*:*:*:*:*:*

part: a version: 11.4 update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Opmanager (2325af94-7fc7-577f-bf28-675a973224ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19921 vulnerable 2026-06-08 05:11:16.323337 Details available
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.
Published: 2018-12-06T22:00:00.000Z
Updated: 2024-09-16T21:09:00.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19288 vulnerable 2026-06-08 05:11:15.565530 Details available
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.
Published: 2018-11-15T06:00:00.000Z
Updated: 2024-08-05T11:30:04.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18949 vulnerable 2026-06-08 05:11:14.988064 Details available
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
Published: 2018-11-05T09:00:00.000Z
Updated: 2024-09-16T17:09:10.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18716 vulnerable 2026-06-08 05:11:14.577078 Details available
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.
Published: 2018-11-20T19:00:00.000Z
Updated: 2024-08-05T11:16:00.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9107 vulnerable 2026-06-08 05:07:12.708695 Details available
Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored devices. The implemented algorithm doesn't use a per-system key or even a salt; therefore, it's possible to create a universal decryptor.
Published: 2017-08-04T00:00:00.000Z
Updated: 2024-08-06T08:36:31.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7868 vulnerable 2026-06-08 05:06:00.305655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7867 vulnerable 2026-06-08 05:06:00.305178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7866 vulnerable 2026-06-08 05:06:00.304791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7864 vulnerable 2026-06-08 05:06:00.300082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6035 vulnerable 2026-06-08 05:05:56.111899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.