Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
References
Link | Resource |
---|---|
https://manageengine.com | Vendor Advisory |
https://www.manageengine.com/itom/advisory/cve-2022-38772.html | Vendor Advisory |
https://manageengine.com | Vendor Advisory |
https://www.manageengine.com/itom/advisory/cve-2022-38772.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:17
Type | Values Removed | Values Added |
---|---|---|
References | () https://manageengine.com - Vendor Advisory | |
References | () https://www.manageengine.com/itom/advisory/cve-2022-38772.html - Vendor Advisory |
Information
Published : 2022-08-29 21:15
Updated : 2024-11-21 07:17
NVD link : CVE-2022-38772
Mitre link : CVE-2022-38772
CVE.ORG link : CVE-2022-38772
JSON object : View
Products Affected
zohocorp
- manageengine_opmanager_plus
- manageengine_network_configuration_manager
- manageengine_oputils
- manageengine_opmanager_msp
- manageengine_netflow_analyzer
- manageengine_opmanager
CWE