How severe is CVE-2015-7765?

CVE-2015-7765 has a CVSS 2.0 base score of 9.0, rated critical severity.

Is CVE-2015-7765 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 67% (99th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-7765?

CVE-2015-7765 affects Zohocorp Manageengine Opmanager. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2015-7765?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2015-7765 published?

CVE-2015-7765 was published on 2015-10-09 and last updated on 2026-06-17.

CVE-2015-7765

CVE-2015-7765 is a critical-severity vulnerability in Zohocorp Manageengine Opmanager with a CVSS 2.0 base score of 9.0. Its EPSS exploit-prediction score of 67% places it in the 99th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 2.0 base score 9.0)
EPSS exploit prediction: 67% (99th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Zohocorp Manageengine Opmanager
Published: 2015-10-09
Last modified: 2026-06-17

Description

ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access by leveraging knowledge of this password.

Frequently asked questions

What is CVE-2015-7765?: ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access by leveraging knowledge of this password.
How severe is CVE-2015-7765?: CVE-2015-7765 has a CVSS 2.0 base score of 9.0, rated critical severity.
Is CVE-2015-7765 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 67% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2015-7765?: CVE-2015-7765 affects Zohocorp Manageengine Opmanager. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2015-7765?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2015-7765 published?: CVE-2015-7765 was published on 2015-10-09 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5:*:*:*:*:*:*:*

More vulnerabilities in Zohocorp Manageengine Opmanager

CVE-2022-29535 — Critical (CVSS 9.8): Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.
CVE-2021-44514 — Critical (CVSS 9.8): OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.
CVE-2021-41075 — Critical (CVSS 9.8): The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module…
CVE-2021-40493 — Critical (CVSS 9.8): Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs…
CVE-2021-41288 — Critical (CVSS 9.8): Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.
CVE-2021-3287 — Critical (CVSS 9.8): Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the…

All CVEs affecting Zohocorp Manageengine Opmanager →