CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-02-03

Last modified

2024-08-04

Affected products

• Manageengine Opmanager (Zohocorp)

References

• http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html
• https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125203
• https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125233