Vulnerability Details CVE-2020-12116
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.905
EPSS Ranking 99.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://www.manageengine.com/network-monitoring/help/read-me-complete.html
- https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125
- https://www.manageengine.com/network-monitoring/help/read-me-complete.html
- https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125
Products affected by CVE-2020-12116
-
cpe:2.3:a:zohocorp:manageengine_opmanager:-
-
cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
-
cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
-
cpe:2.3:a:zohocorp:manageengine_opmanager:12.2
-
cpe:2.3:a:zohocorp:manageengine_opmanager:12.3
-
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4
-
cpe:2.3:a:zohocorp:manageengine_opmanager:12.5
-
cpe:2.3:a:zohocorp:manageengine_opmanager:8