CVE-2022-38772
high · 8.8Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.
8.8
CVSS
78.0%
EPSS (exploit prob.)
100th
EPSS percentile
2022-08-29
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.5 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
| zohocorp | manageengine_netflow_analyzer | 12.6 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-38772