Manageengine Netflow Analyzer (Zohocorp) - vulnerabilities (CVEs)

30 CVEs, 0 in the last 30 days, 200 known versions, newest CVE from 2026-09-23. Vendor: Zohocorp.

CVEs of Manageengine Netflow Analyzer

CVE-2026-12370 - CVSS 7.6 (high), 2026-09-23: ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template…
CVE-2025-9226 - CVSS 4.6 (medium), 2026-01-30: Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the…
CVE-2023-47211 - CVSS 9.1 (critical), 2024-01-08: A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to…
CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
CVE-2022-38772 - CVSS 8.8 (high), 2022-08-29: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and…
CVE-2022-37024 - CVSS 8.8 (high), 2022-08-10: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30…
CVE-2022-36923 - CVSS 7.5 (high), 2022-08-10: Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27…
CVE-2022-35404 - CVSS 8.2 (high), 2022-07-18: ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.
CVE-2019-12133 - CVSS 7.8 (high), 2019-06-18: Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its…
CVE-2019-12196 - CVSS 9.8 (critical), 2019-06-05: A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary…
CVE-2019-8929 - CVSS 6.1 (medium), 2019-05-17: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file…
CVE-2019-8928 - CVSS 6.1 (medium), 2019-05-17: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET…
CVE-2019-8927 - CVSS 6.1 (medium), 2019-05-17: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp…
CVE-2019-8926 - CVSS 6.1 (medium), 2019-05-17: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via…
CVE-2019-8925 - CVSS 4.3 (medium), 2019-05-17: An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in…
CVE-2019-7426 - CVSS 6.1 (medium), 2019-05-07: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the…
CVE-2019-7427 - CVSS 6.1 (medium), 2019-05-07: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the…
CVE-2019-7423 - CVSS 6.1 (medium), 2019-03-21: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName…
CVE-2019-7422 - CVSS 6.1 (medium), 2019-03-21: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.
CVE-2019-7425 - CVSS 6.1 (medium), 2019-03-21: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task…
CVE-2019-7424 - CVSS 6.1 (medium), 2019-03-21: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or…
CVE-2018-12998 - CVSS 6.1 (medium), 2018-06-29: A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build…
CVE-2018-12997 - CVSS 7.5 (high), 2018-06-29: Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build…
CVE-2018-10803 - CVSS 6.1 (medium), 2018-05-10: Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (build 123125)…
CVE-2015-4418 - CVSS 5 (medium), 2015-06-09: Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to…
CVE-2015-2961 - CVSS 6.8 (medium), 2015-06-09: Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of…
CVE-2015-2960 - CVSS 4.3 (medium), 2015-06-09: Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via…
CVE-2015-2959 - CVSS 7.5 (high), 2015-06-09: Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensitive information,…
CVE-2014-5446 - CVSS 5 (medium), 2014-12-04: Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers…
CVE-2014-5445 - CVSS 5 (medium), 2014-12-04: Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote…