← Database

CVE-2022-36923

HIGH CVSS: 7.5 Published: 2022-08-10 Modified: 2026-06-17

Description

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.

Affected Platforms

Zohocorp Manageengine Netflow AnalyzerZohocorp Manageengine OpmanagerZohocorp Manageengine Opmanager PlusZohocorp Manageengine Network Configuration ManagerZohocorp Manageengine Firewall AnalyzerZohocorp Manageengine OputilsZohocorp Manageengine Opmanager Msp

Weakness Type

CWE-755, CWE-284

References