Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
References
Link | Resource |
---|---|
https://manageengine.com | Vendor Advisory |
https://www.manageengine.com/itom/advisory/cve-2022-38772.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-08-29 14:15
Updated : 2022-09-02 12:47
NVD link : CVE-2022-38772
Mitre link : CVE-2022-38772
JSON object : View
CWE
Products Affected
zohocorp
- manageengine_opmanager_msp
- manageengine_network_configuration_manager
- manageengine_opmanager
- manageengine_netflow_analyzer
- manageengine_oputils
- manageengine_opmanager_plus