Manageengine Netflow Analyzer Vulnerabilidad

Cronología

Versión

7.0.0.216
9.04
9.14
7.52

Contramedidas

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined30

Explotabilidad

High4
Functional0
Proof-of-Concept16
Unproven0
Not Defined12

Vector de acceso

Not Defined0
Physical0
Local2
Adjacent0
Network30

Autenticación

Not Defined0
High0
Low4
None28

La interacción del usuario

Not Defined0
Required22
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤510
≤618
≤74
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤514
≤614
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤524
≤68
≤70
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤60
≤714
≤84
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k10
<2k22
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k32
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (16): 7.0.0.2, 7.5, 9.0, 9.1, 12.0, 12.1, 12.2, 12.3, 125657, 125658, 126002, 126003, 126104, 126105, 126118, 126120

Link to Product Website: https://www.manageengine.com/

Tipo de software: Network Management Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2022-08-307.57.4Zoho ManageEngine OpManager NMAP escalada de privilegios$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-38772
2022-08-114.34.1Zoho ManageEngine OpManager Network Configuration divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36923
2022-08-117.57.4Zoho ManageEngine OpManager Database Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-37024
2019-06-186.56.5Zoho ManageEngine Desktop Central Permission sc.exe escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-12133
2019-06-058.58.5Zoho ManageEngine Netflow Analyzer compareReport sql injection$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-12196
2019-05-175.44.9Zoho ManageEngine Netflow Analyzer Professional Administration Zone selectDevice.jsp cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2019-8929
2019-05-175.44.9Zoho ManageEngine Netflow Analyzer Professional userManagementForm.jsp cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2019-8928
2019-05-175.45.4Zoho ManageEngine Netflow Analyzer Professional Administration Zone scheduleConfig.jsp cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.05CVE-2019-8927
2019-05-175.45.4Zoho ManageEngine Netflow Analyzer Professional Administration Zone popup1.jsp cross site scripting$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2019-8926
2019-05-174.34.3Zoho ManageEngine Netflow Analyzer Professional Administration Zone CReportPDFServlet directory traversal$0-$5k$0-$5kProof-of-ConceptNot Defined0.03CVE-2019-8925

21 no se muestran más entradas

más entradas por Manageengine

Do you know our Splunk app?

Download it now for free!