Manageengine opmanager

This hub aggregates every CVE we track for Manageengine opmanager, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Manageengine opmanager.

• CVE-2025-9226Stored XSS4.6Jan 30, 2026
• CVE-2025-9227Stored XSS6.5Nov 11, 2025
• CVE-2024-5466Remote Code Execution8.8Aug 23, 2024
• CVE-2023-47211A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can s...9.1Jan 8, 2024
• CVE-2023-6105ManageEngine Information Disclosure in Multiple Products5.5Nov 15, 2023
• CVE-2023-31099Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.8.8May 4, 2023
• CVE-2022-43473A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can lead to SSRF. An attacker can serve ...5.8Mar 30, 2023
• CVE-2022-38772Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make ...8.8Aug 29, 2022
• CVE-2022-36923Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126...7.5Aug 10, 2022
• CVE-2022-37024Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) a...8.8Aug 9, 2022
• CVE-2022-35404ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.8.2Jul 18, 2022
• CVE-2022-29535Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.9.8May 5, 2022
• CVE-2022-27908Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.8.8Apr 18, 2022
• CVE-2021-44514OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.9.8Dec 9, 2021
• CVE-2021-41075The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API.9.8Oct 13, 2021