CVEDB API

In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.766

EPSS Ranking 98.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2020-13818

Zohocorp » Manageengine Opmanager » Version: N/A

cpe:2.3:a:zohocorp:manageengine_opmanager:-
Zohocorp » Manageengine Opmanager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
Zohocorp » Manageengine Opmanager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
Zohocorp » Manageengine Opmanager » Version: 12.2

cpe:2.3:a:zohocorp:manageengine_opmanager:12.2
Zohocorp » Manageengine Opmanager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_opmanager:12.3
Zohocorp » Manageengine Opmanager » Version: 12.4

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4
Zohocorp » Manageengine Opmanager » Version: 12.4.179

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4.179
Zohocorp » Manageengine Opmanager » Version: 12.5

cpe:2.3:a:zohocorp:manageengine_opmanager:12.5
Zohocorp » Manageengine Opmanager » Version: 8

cpe:2.3:a:zohocorp:manageengine_opmanager:8