CVE-2022-37024

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-08-10

Last modified

2024-08-03

Affected products

• Manageengine Firewall Analyzer (Zohocorp)
• Manageengine Netflow Analyzer (Zohocorp)
• Manageengine Network Configuration Manager (Zohocorp)
• Manageengine Opmanager (Zohocorp)
• Manageengine Opmanager Msp (Zohocorp)
• Manageengine Opmanager Plus (Zohocorp)
• Manageengine Oputils (Zohocorp)

References

• https://www.manageengine.com/itom/advisory/cve-2022-37024.html