OpManager vulnerabilities

2 known vulnerabilities in OpManager from ManageEngine. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  OpManager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-6748Jul 29, 2024ManageEngineEPSS 23.8%

  Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring.

• 8.6 High severity

  OpManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-47211Jan 8, 2024ManageEngineEPSS 47%

  A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.