CVE-2023-47211

zohocorp manageengine firewall analyzer, zohocorp manageengine netflow analyzer, zohocorp manageengine network configuration manager +1 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-47211

Katalog CVE

CVSS 8.6 · High EPSS 47,0%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada zohocorp manageengine firewall analyzer, zohocorp manageengine netflow analyzer +2 lainnya. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

Rincian

Terbit di NVD
8 Januari 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari)
47,0% peluang dieksploitasi; lebih tinggi dari 98,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine firewall analyzer Semua versi sebelum 12.7
zohocorp manageengine firewall analyzer Versi 12.7 build127000
zohocorp manageengine firewall analyzer Versi 12.7 build127101
zohocorp manageengine firewall analyzer Versi 12.7 build127130
zohocorp manageengine firewall analyzer Versi 12.7 build127131
zohocorp manageengine firewall analyzer Versi 12.7 build127187
zohocorp manageengine firewall analyzer Versi 12.7 build127244
zohocorp manageengine firewall analyzer Versi 12.7 build127257
zohocorp manageengine firewall analyzer Versi 12.7 build127259
zohocorp manageengine netflow analyzer Semua versi sebelum 12.7
zohocorp manageengine netflow analyzer Versi 12.7 build127000
zohocorp manageengine netflow analyzer Versi 12.7 build127003
zohocorp manageengine netflow analyzer Versi 12.7 build127101
zohocorp manageengine netflow analyzer Versi 12.7 build127130
zohocorp manageengine netflow analyzer Versi 12.7 build127131
zohocorp manageengine netflow analyzer Versi 12.7 build127187
zohocorp manageengine netflow analyzer Versi 12.7 build127244
zohocorp manageengine netflow analyzer Versi 12.7 build127255
zohocorp manageengine netflow analyzer Versi 12.7 build127257
zohocorp manageengine netflow analyzer Versi 12.7 build127259
zohocorp manageengine network configuration manager Semua versi sebelum 12.7
zohocorp manageengine network configuration manager Versi 12.7 build127000
zohocorp manageengine network configuration manager Versi 12.7 build127102
zohocorp manageengine network configuration manager Versi 12.7 build127105
zohocorp manageengine network configuration manager Versi 12.7 build127132
zohocorp manageengine network configuration manager Versi 12.7 build127243
zohocorp manageengine network configuration manager Versi 12.7 build127257
zohocorp manageengine network configuration manager Versi 12.7 build127259
zohocorp manageengine opmanager Semua versi sebelum 12.7
zohocorp manageengine opmanager Versi 12.7 build127000
zohocorp manageengine opmanager Versi 12.7 build127001
zohocorp manageengine opmanager Versi 12.7 build127002
zohocorp manageengine opmanager Versi 12.7 build127003
zohocorp manageengine opmanager Versi 12.7 build127004
zohocorp manageengine opmanager Versi 12.7 build127100
zohocorp manageengine opmanager Versi 12.7 build127101
zohocorp manageengine opmanager Versi 12.7 build127102
zohocorp manageengine opmanager Versi 12.7 build127103
zohocorp manageengine opmanager Versi 12.7 build127104
zohocorp manageengine opmanager Versi 12.7 build127109
zohocorp manageengine opmanager Versi 12.7 build127116
zohocorp manageengine opmanager Versi 12.7 build127117
zohocorp manageengine opmanager Versi 12.7 build127118
zohocorp manageengine opmanager Versi 12.7 build127119
zohocorp manageengine opmanager Versi 12.7 build127120
zohocorp manageengine opmanager Versi 12.7 build127122
zohocorp manageengine opmanager Versi 12.7 build127123
zohocorp manageengine opmanager Versi 12.7 build127131
zohocorp manageengine opmanager Versi 12.7 build127133
zohocorp manageengine opmanager Versi 12.7 build127134
zohocorp manageengine opmanager Versi 12.7 build127136
zohocorp manageengine opmanager Versi 12.7 build127138
zohocorp manageengine opmanager Versi 12.7 build127140
zohocorp manageengine opmanager Versi 12.7 build127141
zohocorp manageengine opmanager Versi 12.7 build127185
zohocorp manageengine opmanager Versi 12.7 build127186
zohocorp manageengine opmanager Versi 12.7 build127187
zohocorp manageengine opmanager Versi 12.7 build127188
zohocorp manageengine opmanager Versi 12.7 build127189
zohocorp manageengine opmanager Versi 12.7 build127191

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 97 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.