9.8

CVE-2018-18475

Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.

Data is provided by the National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123001
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123002
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123003
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123004
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123005
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123006
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123007
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123008
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123009
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123010
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123011
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123012
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123013
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123014
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123015
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123021
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123022
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123023
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123024
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123025
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123026
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123027
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123028
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123029
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123030
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123031
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123032
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123033
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123034
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123035
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123036
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123037
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123043
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123044
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123045
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123046
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123047
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123048
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123049
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123050
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123051
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123052
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123053
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123054
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123055
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123056
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123057
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123062
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123063
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123064
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123065
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123066
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123067
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123068
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123069
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123070
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123076
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123077
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123078
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123079
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123080
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123081
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123082
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123083
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123084
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123086
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123090
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123091
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123092
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123093
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123104
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123105
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123106
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123107
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123108
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123109
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123110
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123111
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123112
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123113
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123114
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123115
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123116
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123117
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123118
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123119
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123120
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123121
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123122
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123123
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123124
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123125
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123126
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123127
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123136
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123137
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123147
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123148
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123149
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123150
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123156
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123157
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123158
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123159
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123160
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123161
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123162
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123163
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123164
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123165
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123166
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123167
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123168
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123169
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123175
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123176
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123177
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123178
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123179
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123180
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123181
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123182
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123183
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123184
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123185
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123186
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123187
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123188
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123189
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123190
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123191
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123192
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123193
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123194
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123195
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123196
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123197
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123198
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123204
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123205
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123206
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123207
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123208
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.68% 0.883
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://seclists.org/fulldisclosure/2018/Oct/42
Third Party Advisory
Mailing List