CVE-2020-11527 : In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attack

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.

Published 2020-04-04 17:15:14

Updated 2021-07-21 11:39:24

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-11527

Zohocorp » Manageengine Opmanager
Versions before (<) 12.4
cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124040
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124040:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124039
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124039:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124037
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124037:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124033
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124033:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124011
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124011:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124000
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124000:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124065
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124065:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124066
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124066:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:-:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124058
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124058:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124056
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124056:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124054
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124054:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124024
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124024:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124023
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124023:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124022
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124022:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124016
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124016:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124075
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124075:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124081
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124081:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124082
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124082:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124085
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124085:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124051
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124051:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124042
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124042:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124027
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124027:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124025
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124025:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124015
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124015:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124013
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124013:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124069
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124069:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124071
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124071:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124087
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124087:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124053
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124053:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124043
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124043:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124041
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124041:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124030
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124030:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124026
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124026:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124014
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124014:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124012
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124012:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124067
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124067:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124070
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124070:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124074
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124074:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124086
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124086:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124089
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124089:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124095
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124095:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124096
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124096:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124097
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124097:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124098
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124098:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124099
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124099:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124100
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124100:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124101
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124101:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124102
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124102:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124168
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124168:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124169
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124169:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124175
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124175:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124176
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124176:*:*:*:*:*:*
Matching versions
Zohocorp » Manageengine Opmanager » Version: 12.4 Update Build124178
cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124178:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-11527

EPSS FAQ

0.45%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 75 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-11527

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2020-11527

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#124181

Read me | OpManager Help
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-11527

Products affected by CVE-2020-11527

Exploit prediction scoring system (EPSS) score for CVE-2020-11527

CVSS scores for CVE-2020-11527

References for CVE-2020-11527