CVE-2020-28653

PoC —

CVSS 3.1

9.8 critical

EPSS

79%p100

Published

Feb 3, 2021 (Feb 3, 2021)

Modified

Jun 17, 2026

Description

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Vendors: zohocorp
Products: manageengine opmanager
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (78.7%)

In the news0 stories

No ingested article mentions this CVE yet.