Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
References
Link | Resource |
---|---|
https://manageengine.com | Vendor Advisory |
https://www.manageengine.com/itom/advisory/cve-2022-38772.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Sep 2022, 19:47
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-08-29 21:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-38772
Mitre link : CVE-2022-38772
CVE.ORG link : CVE-2022-38772
JSON object : View
Products Affected
zohocorp
- manageengine_opmanager_plus
- manageengine_oputils
- manageengine_opmanager_msp
- manageengine_network_configuration_manager
- manageengine_netflow_analyzer
- manageengine_opmanager
CWE