Zohocorp Manageengine Opmanager Plus — known CVE vulnerabilities

Every CVE whose affected-product data names Zohocorp Manageengine Opmanager Plus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-47211 — CVSS 9.1 (critical): A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP…
• CVE-2022-37024 — CVSS 8.8 (high): Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29…
• CVE-2022-38772 — CVSS 8.8 (high): Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658…
• CVE-2024-5466 — CVSS 8.8 (high): Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote…
• CVE-2022-36923 — CVSS 7.5 (high): Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils…
• CVE-2022-43473 — CVSS 5.8 (medium): A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially…