CVEDB API

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.711

EPSS Ranking 98.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-3287

Zohocorp » Manageengine Opmanager » Version: N/A

cpe:2.3:a:zohocorp:manageengine_opmanager:-
Zohocorp » Manageengine Opmanager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
Zohocorp » Manageengine Opmanager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
Zohocorp » Manageengine Opmanager » Version: 12.2

cpe:2.3:a:zohocorp:manageengine_opmanager:12.2
Zohocorp » Manageengine Opmanager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_opmanager:12.3
Zohocorp » Manageengine Opmanager » Version: 12.4

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4
Zohocorp » Manageengine Opmanager » Version: 12.4.179

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4.179
Zohocorp » Manageengine Opmanager » Version: 12.5

cpe:2.3:a:zohocorp:manageengine_opmanager:12.5
Zohocorp » Manageengine Opmanager » Version: 8

cpe:2.3:a:zohocorp:manageengine_opmanager:8