ManageEngine OpUtils vulnerabilities

2 known vulnerabilities in ManageEngine OpUtils from Zoho. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  OpManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-47211Jan 8, 2024ManageEngineEPSS 47%

  A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

• 7.5 High severity

  Manageengine Firewall Analyzer: Improper Handling of Exceptional Conditions

  CVE-2022-36923Aug 10, 2022ZohoEPSS 7.67%

  Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a us