7.5

CVE-2020-11527

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.

Data is provided by the National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Opmanager Version < 12.4
Zohocorp ≫ Manageengine Opmanager Version12.4 Update-
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124000
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124011
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124012
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124013
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124014
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124015
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124016
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124022
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124023
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124024
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124025
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124026
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124027
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124030
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124033
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124037
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124039
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124040
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124041
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124042
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124043
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124051
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124053
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124054
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124056
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124058
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124065
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124066
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124067
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124069
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124070
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124071
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124074
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124075
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124081
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124082
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124085
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124086
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124087
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124089
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124095
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124096
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124097
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124098
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124099
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124100
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124101
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124102
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124168
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124169
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124175
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124176
Zohocorp ≫ Manageengine Opmanager Version12.4 Updatebuild124178
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 13.62% 0.939
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N