CVE-2018-18475

Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-10-23

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Manageengine Opmanager (Zohocorp)

References

• http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html
• http://seclists.org/fulldisclosure/2018/Oct/42