ManageEngine OpManager

• CVE-2025-41437 Medium 4.3 Reflected XSS 0.3%
• CVE-2024-6748 High 8.3 SQL Injection 23.8%
• CVE-2024-36038 Medium 6.3 Stored XSS 1.4%
• CVE-2023-47211 Critical 9.1 A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send 47.0%
• CVE-2022-43473 Medium 5.8 A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve a 19.8%