Known Vulnerabilities for Manageengine Network Configuration Manager by Zohocorp
Listed below are 10 of the newest known vulnerabilities associated with "Manageengine Network Configuration Manager" by "Zohocorp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-29505 json | An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site... | 8.8 - HIGH | 2023-08-04 | 2023-08-10 |
| CVE-2022-38772 json | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils befo... | 8.8 - HIGH | 2022-08-29 | 2022-09-02 |
| CVE-2022-37024 json | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils befo... | 8.8 - HIGH | 2022-08-10 | 2022-08-16 |
| CVE-2022-36923 json | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyze... | 7.5 - HIGH | 2022-08-10 | 2022-08-16 |
| CVE-2022-35404 json | ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and dire... | 8.2 - HIGH | 2022-07-18 | 2023-08-08 |
| CVE-2021-43319 json | Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation i... | 9.8 - CRITICAL | 2021-11-30 | 2022-04-06 |
| CVE-2021-41081 json | Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search. | 9.8 - CRITICAL | 2021-11-11 | 2023-11-07 |
| CVE-2021-41080 json | Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details sear... | 9.8 - CRITICAL | 2021-11-11 | 2023-11-07 |
| CVE-2019-12133 json | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\... | 7.8 - HIGH | 2019-06-18 | 2020-08-24 |
| CVE-2018-18980 json | An XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager ... | 7.5 - HIGH | 2018-11-06 | 2019-01-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zohocorp | Manageengine Network Configuration Manager | 11.0 |