CVE-2020-12116

Katalog CVE

CVSS 7.5 · High EPSS 97,4%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada zohocorp manageengine opmanager. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request.

Rincian

Terbit di NVD

7 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

97,4% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 80 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.manageengine.com/network-monitoring/help/read-me-complete.html advisory vendor
• https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125 advisory vendor