CVE Vulnerabilities

CVE-2022-37024

Published: Aug 10, 2022 | Modified: Aug 16, 2022
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.

Affected Software

Name Vendor Start Version End Version
Manageengine_firewall_analyzer Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_firewall_analyzer Zohocorp 12.5-build125451 (including) 12.5-build125451 (including)
Manageengine_firewall_analyzer Zohocorp 12.5-build125452 (including) 12.5-build125452 (including)
Manageengine_firewall_analyzer Zohocorp 12.5-build125453 (including) 12.5-build125453 (including)
Manageengine_firewall_analyzer Zohocorp 12.5-build125455 (including) 12.5-build125455 (including)
Manageengine_firewall_analyzer Zohocorp 12.5-build125456 (including) 12.5-build125456 (including)
Manageengine_firewall_analyzer Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126101 (including) 12.6-build126101 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126102 (including) 12.6-build126102 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126114 (including) 12.6-build126114 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126115 (including) 12.6-build126115 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126116 (including) 12.6-build126116 (including)
Manageengine_firewall_analyzer Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125451 (including) 12.5-build125451 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125452 (including) 12.5-build125452 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125453 (including) 12.5-build125453 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125455 (including) 12.5-build125455 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125456 (including) 12.5-build125456 (including)
Manageengine_netflow_analyzer Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126101 (including) 12.6-build126101 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126102 (including) 12.6-build126102 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126114 (including) 12.6-build126114 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126115 (including) 12.6-build126115 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126116 (including) 12.6-build126116 (including)
Manageengine_netflow_analyzer Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125451 (including) 12.5-build125451 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125452 (including) 12.5-build125452 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125453 (including) 12.5-build125453 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125455 (including) 12.5-build125455 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125456 (including) 12.5-build125456 (including)
Manageengine_network_configuration_manager Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126101 (including) 12.6-build126101 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126102 (including) 12.6-build126102 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126114 (including) 12.6-build126114 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126115 (including) 12.6-build126115 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126116 (including) 12.6-build126116 (including)
Manageengine_network_configuration_manager Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)
Manageengine_opmanager Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_opmanager Zohocorp 12.5-build125451 (including) 12.5-build125451 (including)
Manageengine_opmanager Zohocorp 12.5-build125452 (including) 12.5-build125452 (including)
Manageengine_opmanager Zohocorp 12.5-build125453 (including) 12.5-build125453 (including)
Manageengine_opmanager Zohocorp 12.5-build125455 (including) 12.5-build125455 (including)
Manageengine_opmanager Zohocorp 12.5-build125456 (including) 12.5-build125456 (including)
Manageengine_opmanager Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_opmanager Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_opmanager Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_opmanager Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_opmanager Zohocorp 12.6-build126101 (including) 12.6-build126101 (including)
Manageengine_opmanager Zohocorp 12.6-build126102 (including) 12.6-build126102 (including)
Manageengine_opmanager Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_opmanager Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_opmanager Zohocorp 12.6-build126114 (including) 12.6-build126114 (including)
Manageengine_opmanager Zohocorp 12.6-build126115 (including) 12.6-build126115 (including)
Manageengine_opmanager Zohocorp 12.6-build126116 (including) 12.6-build126116 (including)
Manageengine_opmanager Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)
Manageengine_opmanager_msp Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_opmanager_msp Zohocorp 12.5-build125656 (including) 12.5-build125656 (including)
Manageengine_opmanager_msp Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_opmanager_msp Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_opmanager_msp Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_opmanager_msp Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_opmanager_msp Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_opmanager_msp Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_opmanager_msp Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)
Manageengine_opmanager_plus Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_opmanager_plus Zohocorp 12.5-build125656 (including) 12.5-build125656 (including)
Manageengine_opmanager_plus Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_opmanager_plus Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_opmanager_plus Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_opmanager_plus Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_opmanager_plus Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_opmanager_plus Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_opmanager_plus Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)
Manageengine_oputils Zohocorp 12.5-build125450 (including) 12.5-build125450 (including)
Manageengine_oputils Zohocorp 12.5-build125451 (including) 12.5-build125451 (including)
Manageengine_oputils Zohocorp 12.5-build125452 (including) 12.5-build125452 (including)
Manageengine_oputils Zohocorp 12.5-build125453 (including) 12.5-build125453 (including)
Manageengine_oputils Zohocorp 12.5-build125455 (including) 12.5-build125455 (including)
Manageengine_oputils Zohocorp 12.5-build125456 (including) 12.5-build125456 (including)
Manageengine_oputils Zohocorp 12.5-build125664 (including) 12.5-build125664 (including)
Manageengine_oputils Zohocorp 12.6-build126000 (including) 12.6-build126000 (including)
Manageengine_oputils Zohocorp 12.6-build126001 (including) 12.6-build126001 (including)
Manageengine_oputils Zohocorp 12.6-build126100 (including) 12.6-build126100 (including)
Manageengine_oputils Zohocorp 12.6-build126101 (including) 12.6-build126101 (including)
Manageengine_oputils Zohocorp 12.6-build126102 (including) 12.6-build126102 (including)
Manageengine_oputils Zohocorp 12.6-build126103 (including) 12.6-build126103 (including)
Manageengine_oputils Zohocorp 12.6-build126113 (including) 12.6-build126113 (including)
Manageengine_oputils Zohocorp 12.6-build126114 (including) 12.6-build126114 (including)
Manageengine_oputils Zohocorp 12.6-build126115 (including) 12.6-build126115 (including)
Manageengine_oputils Zohocorp 12.6-build126116 (including) 12.6-build126116 (including)
Manageengine_oputils Zohocorp 12.6-build126117 (including) 12.6-build126117 (including)

References