CVE Vulnerabilities

CVE-2020-28653

Published: Feb 03, 2021 | Modified: Apr 18, 2022
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Affected Software

Name Vendor Start Version End Version
Manageengine_opmanager Zohocorp * 12.5 (excluding)
Manageengine_opmanager Zohocorp 12.5-build125000 (including) 12.5-build125000 (including)
Manageengine_opmanager Zohocorp 12.5-build125002 (including) 12.5-build125002 (including)
Manageengine_opmanager Zohocorp 12.5-build125100 (including) 12.5-build125100 (including)
Manageengine_opmanager Zohocorp 12.5-build125101 (including) 12.5-build125101 (including)
Manageengine_opmanager Zohocorp 12.5-build125102 (including) 12.5-build125102 (including)
Manageengine_opmanager Zohocorp 12.5-build125108 (including) 12.5-build125108 (including)
Manageengine_opmanager Zohocorp 12.5-build125110 (including) 12.5-build125110 (including)
Manageengine_opmanager Zohocorp 12.5-build125111 (including) 12.5-build125111 (including)
Manageengine_opmanager Zohocorp 12.5-build125112 (including) 12.5-build125112 (including)
Manageengine_opmanager Zohocorp 12.5-build125113 (including) 12.5-build125113 (including)
Manageengine_opmanager Zohocorp 12.5-build125114 (including) 12.5-build125114 (including)
Manageengine_opmanager Zohocorp 12.5-build125116 (including) 12.5-build125116 (including)
Manageengine_opmanager Zohocorp 12.5-build125117 (including) 12.5-build125117 (including)
Manageengine_opmanager Zohocorp 12.5-build125118 (including) 12.5-build125118 (including)
Manageengine_opmanager Zohocorp 12.5-build125120 (including) 12.5-build125120 (including)
Manageengine_opmanager Zohocorp 12.5-build125121 (including) 12.5-build125121 (including)
Manageengine_opmanager Zohocorp 12.5-build125123 (including) 12.5-build125123 (including)
Manageengine_opmanager Zohocorp 12.5-build125124 (including) 12.5-build125124 (including)
Manageengine_opmanager Zohocorp 12.5-build125125 (including) 12.5-build125125 (including)
Manageengine_opmanager Zohocorp 12.5-build125136 (including) 12.5-build125136 (including)
Manageengine_opmanager Zohocorp 12.5-build125137 (including) 12.5-build125137 (including)
Manageengine_opmanager Zohocorp 12.5-build125139 (including) 12.5-build125139 (including)
Manageengine_opmanager Zohocorp 12.5-build125140 (including) 12.5-build125140 (including)
Manageengine_opmanager Zohocorp 12.5-build125143 (including) 12.5-build125143 (including)
Manageengine_opmanager Zohocorp 12.5-build125144 (including) 12.5-build125144 (including)
Manageengine_opmanager Zohocorp 12.5-build125145 (including) 12.5-build125145 (including)
Manageengine_opmanager Zohocorp 12.5-build125156 (including) 12.5-build125156 (including)
Manageengine_opmanager Zohocorp 12.5-build125157 (including) 12.5-build125157 (including)
Manageengine_opmanager Zohocorp 12.5-build125158 (including) 12.5-build125158 (including)
Manageengine_opmanager Zohocorp 12.5-build125159 (including) 12.5-build125159 (including)
Manageengine_opmanager Zohocorp 12.5-build125161 (including) 12.5-build125161 (including)
Manageengine_opmanager Zohocorp 12.5-build125163 (including) 12.5-build125163 (including)
Manageengine_opmanager Zohocorp 12.5-build125174 (including) 12.5-build125174 (including)
Manageengine_opmanager Zohocorp 12.5-build125175 (including) 12.5-build125175 (including)
Manageengine_opmanager Zohocorp 12.5-build125176 (including) 12.5-build125176 (including)
Manageengine_opmanager Zohocorp 12.5-build125177 (including) 12.5-build125177 (including)
Manageengine_opmanager Zohocorp 12.5-build125178 (including) 12.5-build125178 (including)
Manageengine_opmanager Zohocorp 12.5-build125180 (including) 12.5-build125180 (including)
Manageengine_opmanager Zohocorp 12.5-build125181 (including) 12.5-build125181 (including)
Manageengine_opmanager Zohocorp 12.5-build125192 (including) 12.5-build125192 (including)
Manageengine_opmanager Zohocorp 12.5-build125193 (including) 12.5-build125193 (including)
Manageengine_opmanager Zohocorp 12.5-build125194 (including) 12.5-build125194 (including)
Manageengine_opmanager Zohocorp 12.5-build125195 (including) 12.5-build125195 (including)
Manageengine_opmanager Zohocorp 12.5-build125196 (including) 12.5-build125196 (including)
Manageengine_opmanager Zohocorp 12.5-build125197 (including) 12.5-build125197 (including)
Manageengine_opmanager Zohocorp 12.5-build125198 (including) 12.5-build125198 (including)
Manageengine_opmanager Zohocorp 12.5-build125201 (including) 12.5-build125201 (including)
Manageengine_opmanager Zohocorp 12.5-build125204 (including) 12.5-build125204 (including)
Manageengine_opmanager Zohocorp 12.5-build125212 (including) 12.5-build125212 (including)
Manageengine_opmanager Zohocorp 12.5-build125213 (including) 12.5-build125213 (including)
Manageengine_opmanager Zohocorp 12.5-build125214 (including) 12.5-build125214 (including)
Manageengine_opmanager Zohocorp 12.5-build125215 (including) 12.5-build125215 (including)
Manageengine_opmanager Zohocorp 12.5-build125216 (including) 12.5-build125216 (including)
Manageengine_opmanager Zohocorp 12.5-build125228 (including) 12.5-build125228 (including)
Manageengine_opmanager Zohocorp 12.5-build125229 (including) 12.5-build125229 (including)
Manageengine_opmanager Zohocorp 12.5-build125230 (including) 12.5-build125230 (including)
Manageengine_opmanager Zohocorp 12.5-build125231 (including) 12.5-build125231 (including)
Manageengine_opmanager Zohocorp 12.5-build125232 (including) 12.5-build125232 (including)

References