Manageengine Firewall Analyzer (Zohocorp) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 165 known versions, newest CVE from 2026-09-23. Vendor: Zohocorp.
CVEs of Manageengine Firewall Analyzer
- CVE-2026-76978 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose…
- CVE-2026-76979 - CVSS 7.7 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking…
- CVE-2026-76980 - CVSS 7.4 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer…
- CVE-2026-84787 - CVSS 8.1 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an…
- CVE-2026-84789 - CVSS 7.1 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an…
- CVE-2026-84791 - CVSS 7.1 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an…
- CVE-2026-14913 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search…
- CVE-2023-47211 - CVSS 9.1 (critical), 2024-01-08: A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to…
- CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
- CVE-2022-37024 - CVSS 8.8 (high), 2022-08-10: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30…
- CVE-2022-36923 - CVSS 7.5 (high), 2022-08-10: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27…
- CVE-2022-35404 - CVSS 8.2 (high), 2022-07-18: ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
- CVE-2019-17421 - CVSS 7.8 (high), 2019-11-21: Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to…
- CVE-2019-11678 - CVSS 9.8 (critical), 2019-05-02: The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.
- CVE-2019-11677 - CVSS 9.8 (critical), 2019-05-02: The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.
- CVE-2019-11676 - CVSS 6.1 (medium), 2019-05-02: The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks.
- CVE-2017-14123 - CVSS 8.8 (high), 2017-09-04: Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any…
- CVE-2015-7781 - CVSS 7.5 (high), 2017-06-27: ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.
- CVE-2015-7780 - CVSS 6.5 (medium), 2017-06-27: Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.
