Vulnerability in Zohocorp Manageengine_netflow_analyzer
CVE-2022-38772
Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code…
EPSS: 0.776 (99.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Zohocorp Manageengine_netflow_analyzer — versions 12.5, 12.6
- Zohocorp Manageengine_network_configuration_manager — versions 12.5, 12.6
- Zohocorp Manageengine_opmanager — versions 12.5, 12.6
- Zohocorp Manageengine_opmanager_msp — versions 12.5, 12.6
- Zohocorp Manageengine_opmanager_plus — versions 12.5, 12.6
- Zohocorp Manageengine_oputils — versions 12.5, 12.6
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-38772?
- CVE-2022-38772 is a high-severity vulnerability in Zohocorp Manageengine_netflow_analyzer. CVSS score: 8.8/10. Published 2022-08-29.
- How severe is CVE-2022-38772?
- High severity. CVSS v3 base score is 8.8 out of 10.