Manageengine Netflow Analyzer Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

7.0.0.2	10
9.0	4
9.1	4
125658	2
126003	2

Remediation

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	24

Exploitability

High	4
Functional	0
Proof-of-Concept	8
Unproven	0
Not Defined	20

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	30

Authentication

Not Defined	0
High	0
Low	8
None	24

User Interaction

Not Defined	0
Required	12
None	20

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	16
≤7	4
≤8	4
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	14
≤7	4
≤8	4
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	14
≤6	12
≤7	4
≤8	0
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	0
≤7	12
≤8	4
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	4
<2k	24
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	32
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (16): 7.0.0.2, 7.5, 9.0, 9.1, 12.0, 12.1, 12.2, 12.3, 125657, 125658, 126002, 126003, 126104, 126105, 126118, 126120

Link to Product Website: https://www.manageengine.com/

Software Type: Network Management Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
08/30/2022	7.5	7.4	Zoho ManageEngine OpManager NMAP access control	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-38772
08/11/2022	4.3	4.1	Zoho ManageEngine OpManager Network Configuration information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-36923
08/11/2022	7.5	7.4	Zoho ManageEngine OpManager Database Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-37024
06/18/2019	6.5	6.5	Zoho ManageEngine Desktop Central Permission sc.exe permission	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-12133
06/05/2019	8.5	8.5	Zoho ManageEngine Netflow Analyzer compareReport sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-12196
05/17/2019	5.4	4.9	Zoho ManageEngine Netflow Analyzer Professional Administration Zone selectDevice.jsp cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2019-8929
05/17/2019	5.4	4.9	Zoho ManageEngine Netflow Analyzer Professional userManagementForm.jsp cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2019-8928
05/17/2019	5.4	5.4	Zoho ManageEngine Netflow Analyzer Professional Administration Zone scheduleConfig.jsp cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2019-8927
05/17/2019	5.4	5.4	Zoho ManageEngine Netflow Analyzer Professional Administration Zone popup1.jsp cross site scripting	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2019-8926
05/17/2019	4.3	4.3	Zoho ManageEngine Netflow Analyzer Professional Administration Zone CReportPDFServlet path traversal	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	CVE-2019-8925