CVE-2022-38772: High severity zoho manageengine netflow analyzer vulnerability

Published Aug 29, 2022
·
Updated

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature.

Affected Software

208 affected components
ZohoCorp Manageengine Netflow Analyzer=12.5-build125450
ZohoCorp Manageengine Netflow Analyzer=12.5-build125451
ZohoCorp Manageengine Netflow Analyzer=12.5-build125452
ZohoCorp Manageengine Netflow Analyzer=12.5-build125453
ZohoCorp Manageengine Netflow Analyzer=12.5-build125455
ZohoCorp Manageengine Netflow Analyzer=12.5-build125456
ZohoCorp Manageengine Netflow Analyzer=12.5-build125459
ZohoCorp Manageengine Netflow Analyzer=12.5-build125464
ZohoCorp Manageengine Netflow Analyzer=12.5-build125467
ZohoCorp Manageengine Netflow Analyzer=12.5-build125469
ZohoCorp Manageengine Netflow Analyzer=12.5-build125471
ZohoCorp Manageengine Netflow Analyzer=12.5-build125476
ZohoCorp Manageengine Netflow Analyzer=12.5-build125482
ZohoCorp Manageengine Netflow Analyzer=12.5-build125483
ZohoCorp Manageengine Netflow Analyzer=12.5-build125484
ZohoCorp Manageengine Netflow Analyzer=12.5-build125485
ZohoCorp Manageengine Netflow Analyzer=12.5-build125488
ZohoCorp Manageengine Netflow Analyzer=12.5-build125490
ZohoCorp Manageengine Netflow Analyzer=12.5-build125557
ZohoCorp Manageengine Netflow Analyzer=12.5-build125566
ZohoCorp Manageengine Netflow Analyzer=12.5-build125568
ZohoCorp Manageengine Netflow Analyzer=12.5-build125582
ZohoCorp Manageengine Netflow Analyzer=12.5-build125584
ZohoCorp Manageengine Netflow Analyzer=12.5-build125585
ZohoCorp Manageengine Netflow Analyzer=12.5-build125606
ZohoCorp Manageengine Netflow Analyzer=12.5-build125615
ZohoCorp Manageengine Netflow Analyzer=12.5-build125647
ZohoCorp Manageengine Netflow Analyzer=12.5-build125656
ZohoCorp Manageengine Netflow Analyzer=12.5-build125657
ZohoCorp Manageengine Netflow Analyzer=12.5-build125664
ZohoCorp Manageengine Netflow Analyzer=12.6-build126000
ZohoCorp Manageengine Netflow Analyzer=12.6-build126001
ZohoCorp Manageengine Netflow Analyzer=12.6-build126100
ZohoCorp Manageengine Netflow Analyzer=12.6-build126101
ZohoCorp Manageengine Netflow Analyzer=12.6-build126102
ZohoCorp Manageengine Netflow Analyzer=12.6-build126113
ZohoCorp Manageengine Netflow Analyzer=12.6-build126114
ZohoCorp Manageengine Netflow Analyzer=12.6-build126115
ZohoCorp Manageengine Netflow Analyzer=12.6-build126116
ZohoCorp Manageengine Netflow Analyzer=12.6-build126117
ZohoCorp Manageengine Netflow Analyzer=12.6-build126118
ZohoCorp Manageengine Netflow Analyzer=12.6-build126119
Zohocorp Manageengine Network Configuration Manager=12.5-build125450
Zohocorp Manageengine Network Configuration Manager=12.5-build125451
Zohocorp Manageengine Network Configuration Manager=12.5-build125452
Zohocorp Manageengine Network Configuration Manager=12.5-build125453
Zohocorp Manageengine Network Configuration Manager=12.5-build125455
Zohocorp Manageengine Network Configuration Manager=12.5-build125456
Zohocorp Manageengine Network Configuration Manager=12.5-build125459
Zohocorp Manageengine Network Configuration Manager=12.5-build125465
Zohocorp Manageengine Network Configuration Manager=12.5-build125469
Zohocorp Manageengine Network Configuration Manager=12.5-build125471
Zohocorp Manageengine Network Configuration Manager=12.5-build125475
Zohocorp Manageengine Network Configuration Manager=12.5-build125482
Zohocorp Manageengine Network Configuration Manager=12.5-build125483
Zohocorp Manageengine Network Configuration Manager=12.5-build125485
Zohocorp Manageengine Network Configuration Manager=12.5-build125488
Zohocorp Manageengine Network Configuration Manager=12.5-build125490
Zohocorp Manageengine Network Configuration Manager=12.5-build125565
Zohocorp Manageengine Network Configuration Manager=12.5-build125568
Zohocorp Manageengine Network Configuration Manager=12.5-build125583
Zohocorp Manageengine Network Configuration Manager=12.5-build125584
Zohocorp Manageengine Network Configuration Manager=12.5-build125598
Zohocorp Manageengine Network Configuration Manager=12.5-build125612
Zohocorp Manageengine Network Configuration Manager=12.5-build125615
Zohocorp Manageengine Network Configuration Manager=12.5-build125617
Zohocorp Manageengine Network Configuration Manager=12.5-build125646
Zohocorp Manageengine Network Configuration Manager=12.5-build125650
Zohocorp Manageengine Network Configuration Manager=12.5-build125656
Zohocorp Manageengine Network Configuration Manager=12.5-build125657
Zohocorp Manageengine Network Configuration Manager=12.5-build125664
Zohocorp Manageengine Network Configuration Manager=12.6-build126000
Zohocorp Manageengine Network Configuration Manager=12.6-build126001
Zohocorp Manageengine Network Configuration Manager=12.6-build126002
Zohocorp Manageengine Network Configuration Manager=12.6-build126100
Zohocorp Manageengine Network Configuration Manager=12.6-build126101
Zohocorp Manageengine Network Configuration Manager=12.6-build126102
Zohocorp Manageengine Network Configuration Manager=12.6-build126103
Zohocorp Manageengine Network Configuration Manager=12.6-build126104
Zohocorp Manageengine Network Configuration Manager=12.6-build126113
Zohocorp Manageengine Network Configuration Manager=12.6-build126114
Zohocorp Manageengine Network Configuration Manager=12.6-build126115
Zohocorp Manageengine Network Configuration Manager=12.6-build126116
Zohocorp Manageengine Network Configuration Manager=12.6-build126117
Zohocorp Manageengine Network Configuration Manager=12.6-build126118
Zohocorp Manageengine Network Configuration Manager=12.6-build126119
Zohocorp ManageEngine OpManager=12.5-build125450
Zohocorp ManageEngine OpManager=12.5-build125451
Zohocorp ManageEngine OpManager=12.5-build125452
Zohocorp ManageEngine OpManager=12.5-build125453
Zohocorp ManageEngine OpManager=12.5-build125455
Zohocorp ManageEngine OpManager=12.5-build125456
Zohocorp ManageEngine OpManager=12.5-build125457
Zohocorp ManageEngine OpManager=12.5-build125466
Zohocorp ManageEngine OpManager=12.5-build125467
Zohocorp ManageEngine OpManager=12.5-build125468
Zohocorp ManageEngine OpManager=12.5-build125469
Zohocorp ManageEngine OpManager=12.5-build125470
Zohocorp ManageEngine OpManager=12.5-build125476
Zohocorp ManageEngine OpManager=12.5-build125482
Zohocorp ManageEngine OpManager=12.5-build125483
Zohocorp ManageEngine OpManager=12.5-build125485
Zohocorp ManageEngine OpManager=12.5-build125486
Zohocorp ManageEngine OpManager=12.5-build125487
Zohocorp ManageEngine OpManager=12.5-build125488
Zohocorp ManageEngine OpManager=12.5-build125489
Zohocorp ManageEngine OpManager=12.5-build125567
Zohocorp ManageEngine OpManager=12.5-build125568
Zohocorp ManageEngine OpManager=12.5-build125587
Zohocorp ManageEngine OpManager=12.5-build125588
Zohocorp ManageEngine OpManager=12.5-build125589
Zohocorp ManageEngine OpManager=12.5-build125597
Zohocorp ManageEngine OpManager=12.5-build125598
Zohocorp ManageEngine OpManager=12.5-build125599
Zohocorp ManageEngine OpManager=12.5-build125601
Zohocorp ManageEngine OpManager=12.5-build125603
Zohocorp ManageEngine OpManager=12.5-build125604
Zohocorp ManageEngine OpManager=12.5-build125605
Zohocorp ManageEngine OpManager=12.5-build125611
Zohocorp ManageEngine OpManager=12.5-build125612
Zohocorp ManageEngine OpManager=12.5-build125613
Zohocorp ManageEngine OpManager=12.5-build125614
Zohocorp ManageEngine OpManager=12.5-build125615
Zohocorp ManageEngine OpManager=12.5-build125616
Zohocorp ManageEngine OpManager=12.5-build125617
Zohocorp ManageEngine OpManager=12.5-build125628
Zohocorp ManageEngine OpManager=12.5-build125629
Zohocorp ManageEngine OpManager=12.5-build125630
Zohocorp ManageEngine OpManager=12.5-build125631
Zohocorp ManageEngine OpManager=12.5-build125632
Zohocorp ManageEngine OpManager=12.5-build125634
Zohocorp ManageEngine OpManager=12.5-build125635
Zohocorp ManageEngine OpManager=12.5-build125638
Zohocorp ManageEngine OpManager=12.5-build125639
Zohocorp ManageEngine OpManager=12.5-build125645
Zohocorp ManageEngine OpManager=12.5-build125648
Zohocorp ManageEngine OpManager=12.5-build125649
Zohocorp ManageEngine OpManager=12.5-build125651
Zohocorp ManageEngine OpManager=12.5-build125652
Zohocorp ManageEngine OpManager=12.5-build125653
Zohocorp ManageEngine OpManager=12.5-build125654
Zohocorp ManageEngine OpManager=12.5-build125655
Zohocorp ManageEngine OpManager=12.5-build125656
Zohocorp ManageEngine OpManager=12.5-build125657
Zohocorp ManageEngine OpManager=12.5-build125664
Zohocorp ManageEngine OpManager=12.6-build126000
Zohocorp ManageEngine OpManager=12.6-build126001
Zohocorp ManageEngine OpManager=12.6-build126002
Zohocorp ManageEngine OpManager=12.6-build126100
Zohocorp ManageEngine OpManager=12.6-build126101
Zohocorp ManageEngine OpManager=12.6-build126102
Zohocorp ManageEngine OpManager=12.6-build126103
Zohocorp ManageEngine OpManager=12.6-build126104
Zohocorp ManageEngine OpManager=12.6-build126113
Zohocorp ManageEngine OpManager=12.6-build126114
Zohocorp ManageEngine OpManager=12.6-build126115
Zohocorp ManageEngine OpManager=12.6-build126116
Zohocorp ManageEngine OpManager=12.6-build126117
Zohocorp ManageEngine OpManager=12.6-build126118
Zohocorp ManageEngine OpManager=12.6-build126119
Zohocorp Manageengine Opmanager Msp=12.5-build125450
Zohocorp Manageengine Opmanager Msp=12.5-build125656
Zohocorp Manageengine Opmanager Msp=12.5-build125657
Zohocorp Manageengine Opmanager Msp=12.5-build125664
Zohocorp Manageengine Opmanager Msp=12.6-build126000
Zohocorp Manageengine Opmanager Msp=12.6-build126001
Zohocorp Manageengine Opmanager Msp=12.6-build126002
Zohocorp Manageengine Opmanager Msp=12.6-build126100
Zohocorp Manageengine Opmanager Msp=12.6-build126103
Zohocorp Manageengine Opmanager Msp=12.6-build126104
Zohocorp Manageengine Opmanager Msp=12.6-build126113
Zohocorp Manageengine Opmanager Msp=12.6-build126117
Zohocorp Manageengine Opmanager Msp=12.6-build126119
Zohocorp Manageengine Opmanager Plus=12.5-build125450
Zohocorp Manageengine Opmanager Plus=12.5-build125656
Zohocorp Manageengine Opmanager Plus=12.5-build125657
Zohocorp Manageengine Opmanager Plus=12.5-build125664
Zohocorp Manageengine Opmanager Plus=12.6-build126000
Zohocorp Manageengine Opmanager Plus=12.6-build126001
Zohocorp Manageengine Opmanager Plus=12.6-build126002
Zohocorp Manageengine Opmanager Plus=12.6-build126100
Zohocorp Manageengine Opmanager Plus=12.6-build126103
Zohocorp Manageengine Opmanager Plus=12.6-build126104
Zohocorp Manageengine Opmanager Plus=12.6-build126113
Zohocorp Manageengine Opmanager Plus=12.6-build126117
Zohocorp Manageengine Opmanager Plus=12.6-build126119
Zohocorp Manageengine Oputils=12.5-build125450
Zohocorp Manageengine Oputils=12.5-build125451
Zohocorp Manageengine Oputils=12.5-build125452
Zohocorp Manageengine Oputils=12.5-build125453
Zohocorp Manageengine Oputils=12.5-build125455
Zohocorp Manageengine Oputils=12.5-build125456
Zohocorp Manageengine Oputils=12.5-build125657
Zohocorp Manageengine Oputils=12.5-build125664
Zohocorp Manageengine Oputils=12.6-build126000
Zohocorp Manageengine Oputils=12.6-build126001
Zohocorp Manageengine Oputils=12.6-build126002
Zohocorp Manageengine Oputils=12.6-build126100
Zohocorp Manageengine Oputils=12.6-build126101
Zohocorp Manageengine Oputils=12.6-build126102
Zohocorp Manageengine Oputils=12.6-build126103
Zohocorp Manageengine Oputils=12.6-build126104
Zohocorp Manageengine Oputils=12.6-build126113
Zohocorp Manageengine Oputils=12.6-build126114
Zohocorp Manageengine Oputils=12.6-build126115
Zohocorp Manageengine Oputils=12.6-build126116
Zohocorp Manageengine Oputils=12.6-build126117
Zohocorp Manageengine Oputils=12.6-build126119

Event History

Aug 29, 2022
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-38772?

CVE-2022-38772 has been rated as a critical vulnerability due to the potential for remote code execution.

2

How do I fix CVE-2022-38772?

To fix CVE-2022-38772, update to the patched versions available: 125658, 126003, 126105, or 126120 for the affected software.

3

What software is affected by CVE-2022-38772?

CVE-2022-38772 affects various ManageEngine products including OpManager, OpManager Plus, Network Configuration Manager, NetFlow Analyzer, and OpUtils.

4

What type of vulnerability is CVE-2022-38772?

CVE-2022-38772 is a vulnerability that allows authenticated users to make unauthorized database modifications leading to remote code execution.

5

Who is impacted by CVE-2022-38772?

Organizations using vulnerable builds of the affected ManageEngine products are at risk from CVE-2022-38772 if they have not applied the necessary updates.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203