ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-36923

—
CVSS 3.1
7.5 high
EPSS
7%p94
Published
()
Modified
Description

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.

Vendors
zohocorp
Products
manageengine firewall analyzer, manageengine netflow analyzer, manageengine network configuration manager, manageengine opmanager, manageengine opmanager msp, manageengine opmanager plus, manageengine oputils
Weakness
CWE-755, CWE-284
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (7.1%)

In the news

No ingested article mentions this CVE yet.