Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
References
Link | Resource |
---|---|
https://manageengine.com | Vendor Advisory |
https://www.manageengine.com/itom/advisory/cve-2022-38772.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2022-08-29 21:15
Updated : 2024-02-28 19:29
NVD link : CVE-2022-38772
Mitre link : CVE-2022-38772
CVE.ORG link : CVE-2022-38772
JSON object : View
Products Affected
zohocorp
- manageengine_opmanager
- manageengine_netflow_analyzer
- manageengine_opmanager_plus
- manageengine_opmanager_msp
- manageengine_network_configuration_manager
- manageengine_oputils
CWE