CVE-2023-31099: High severity manageengine opmanager msp vulnerability

Published May 4, 2023
·
Updated

Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.

Affected Software

69 affected components
ZohoCorp ManageEngine OpManager<12.6
ZohoCorp ManageEngine OpManager=12.6-build126000
ZohoCorp ManageEngine OpManager=12.6-build126001
ZohoCorp ManageEngine OpManager=12.6-build126002
ZohoCorp ManageEngine OpManager=12.6-build126004
ZohoCorp ManageEngine OpManager=12.6-build126005
ZohoCorp ManageEngine OpManager=12.6-build126100
ZohoCorp ManageEngine OpManager=12.6-build126101
ZohoCorp ManageEngine OpManager=12.6-build126102
ZohoCorp ManageEngine OpManager=12.6-build126103
ZohoCorp ManageEngine OpManager=12.6-build126104
ZohoCorp ManageEngine OpManager=12.6-build126107
ZohoCorp ManageEngine OpManager=12.6-build126108
ZohoCorp ManageEngine OpManager=12.6-build126109
ZohoCorp ManageEngine OpManager=12.6-build126110
ZohoCorp ManageEngine OpManager=12.6-build126113
ZohoCorp ManageEngine OpManager=12.6-build126114
ZohoCorp ManageEngine OpManager=12.6-build126115
ZohoCorp ManageEngine OpManager=12.6-build126116
ZohoCorp ManageEngine OpManager=12.6-build126117
ZohoCorp ManageEngine OpManager=12.6-build126118
ZohoCorp ManageEngine OpManager=12.6-build126119
ZohoCorp ManageEngine OpManager=12.6-build126120
ZohoCorp ManageEngine OpManager=12.6-build126121
ZohoCorp ManageEngine OpManager=12.6-build126122
ZohoCorp ManageEngine OpManager=12.6-build126130
ZohoCorp ManageEngine OpManager=12.6-build126131
ZohoCorp ManageEngine OpManager=12.6-build126132
ZohoCorp ManageEngine OpManager=12.6-build126134
ZohoCorp ManageEngine OpManager=12.6-build126135
ZohoCorp ManageEngine OpManager=12.6-build126136
ZohoCorp ManageEngine OpManager=12.6-build126139
ZohoCorp ManageEngine OpManager=12.6-build126141
ZohoCorp ManageEngine OpManager=12.6-build126147
ZohoCorp ManageEngine OpManager=12.6-build126148
ZohoCorp ManageEngine OpManager=12.6-build126149
ZohoCorp ManageEngine OpManager=12.6-build126150
ZohoCorp ManageEngine OpManager=12.6-build126151
ZohoCorp ManageEngine OpManager=12.6-build126154
ZohoCorp ManageEngine OpManager=12.6-build126155
ZohoCorp ManageEngine OpManager=12.6-build126162
ZohoCorp ManageEngine OpManager=12.6-build126163
ZohoCorp ManageEngine OpManager=12.6-build126164
ZohoCorp ManageEngine OpManager=12.6-build126165
ZohoCorp ManageEngine OpManager=12.6-build126166
ZohoCorp ManageEngine OpManager=12.6-build126167
ZohoCorp ManageEngine OpManager=12.6-build126168
ZohoCorp ManageEngine OpManager=12.6-build126169
ZohoCorp ManageEngine OpManager=12.6-build126262
ZohoCorp ManageEngine OpManager=12.6-build126264
ZohoCorp ManageEngine OpManager=12.6-build126275
ZohoCorp ManageEngine OpManager=12.6-build126276
ZohoCorp ManageEngine OpManager=12.6-build126277
ZohoCorp ManageEngine OpManager=12.6-build126278
ZohoCorp ManageEngine OpManager=12.6-build126279
ZohoCorp ManageEngine OpManager=12.6-build126280
ZohoCorp ManageEngine OpManager=12.6-build126283
ZohoCorp ManageEngine OpManager=12.6-build126284
ZohoCorp ManageEngine OpManager=12.6-build126285
ZohoCorp ManageEngine OpManager=12.6-build126290
ZohoCorp ManageEngine OpManager=12.6-build126293
ZohoCorp ManageEngine OpManager=12.6-build126294
ZohoCorp ManageEngine OpManager=12.6-build126295
ZohoCorp ManageEngine OpManager=12.6-build126306
ZohoCorp ManageEngine OpManager=12.6-build126308
ZohoCorp ManageEngine OpManager=12.6-build126310
ZohoCorp ManageEngine OpManager=12.6-build126311
ZohoCorp ManageEngine OpManager=12.6-build126322
ZohoCorp ManageEngine OpManager=12.6-build126323

Event History

May 4, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
02:15 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-31099?

CVE-2023-31099 is classified as a high severity vulnerability due to its potential for remote code execution.

2

How do I fix CVE-2023-31099?

To fix CVE-2023-31099, you should upgrade to a patched version of ManageEngine OpManager that addresses this vulnerability.

3

Who is affected by CVE-2023-31099?

CVE-2023-31099 affects authenticated users of ManageEngine OpManager up to version 12.6 build 126323.

4

What does CVE-2023-31099 allow an attacker to do?

CVE-2023-31099 allows authenticated users to achieve remote code execution via probe servers.

5

What versions of ManageEngine OpManager are vulnerable to CVE-2023-31099?

ManageEngine OpManager versions up to 12.6 build 126323 are vulnerable to CVE-2023-31099.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203