CVE-2018-18475

N/A

Published: October 23, 2018 at 09:00 PM UTC

Updated: June 17, 2026 at 01:47 AM UTC

1 product affected across 1 vendorManageengine Opmanager

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 20%

Description

Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Manageengine Opmanager · Zohocorp

95%

12.3 build123001 12.3 build123002 12.3 build123003 12.3 build123004 12.3 build123005 12.3 build123006 12.3 build123007 12.3 build123008 12.3 build123009 12.3 build123010 12.3 build123011 12.3 build123012 12.3 build123013 12.3 build123014 12.3 build123015 12.3 build123021 12.3 build123022 12.3 build123023 12.3 build123024 12.3 build123025 12.3 build123026 12.3 build123027 12.3 build123028 12.3 build123029 12.3 build123030 12.3 build123031 12.3 build123032 12.3 build123033 12.3 build123034 12.3 build123035 12.3 build123036 12.3 build123037 12.3 build123043 12.3 build123044 12.3 build123045 12.3 build123046 12.3 build123047 12.3 build123048 12.3 build123049 12.3 build123050 12.3 build123051 12.3 build123052 12.3 build123053 12.3 build123054 12.3 build123055 12.3 build123056 12.3 build123057 12.3 build123062 12.3 build123063 12.3 build123064 12.3 build123065 12.3 build123066 12.3 build123067 12.3 build123068 12.3 build123069 12.3 build123070 12.3 build123076 12.3 build123077 12.3 build123078 12.3 build123079 12.3 build123080 12.3 build123081 12.3 build123082 12.3 build123083 12.3 build123084 12.3 build123086 12.3 build123090 12.3 build123091 12.3 build123092 12.3 build123093 12.3 build123104 12.3 build123105 12.3 build123106 12.3 build123107 12.3 build123108 12.3 build123109 12.3 build123110 12.3 build123111 12.3 build123112 12.3 build123113 12.3 build123114 12.3 build123115 12.3 build123116 12.3 build123117 12.3 build123118 12.3 build123119 12.3 build123120 12.3 build123121 12.3 build123122 12.3 build123123 12.3 build123124 12.3 build123125 12.3 build123126 12.3 build123127 12.3 build123136 12.3 build123137 12.3 build123147 12.3 build123148 12.3 build123149 12.3 build123150 12.3 build123156 12.3 build123157 12.3 build123158 12.3 build123159 12.3 build123160 12.3 build123161 12.3 build123162 12.3 build123163 12.3 build123164 12.3 build123165 12.3 build123166 12.3 build123167 12.3 build123168 12.3 build123169 12.3 build123175 12.3 build123176 12.3 build123177 12.3 build123178 12.3 build123179 12.3 build123180 12.3 build123181 12.3 build123182 12.3 build123183 12.3 build123184 12.3 build123185 12.3 build123186 12.3 build123187 12.3 build123188 12.3 build123189 12.3 build123190 12.3 build123191 12.3 build123192 12.3 build123193 12.3 build123194 12.3 build123195 12.3 build123196 12.3 build123197 12.3 build123198 12.3 build123204 12.3 build123205 12.3 build123206 12.3 build123207 12.3 build123208

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISCThird Party AdvisoryVDB Entry

Source: [email protected]

http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html

Mailing Listx_refsource_FULLDISCThird Party Advisory

Source: [email protected]

http://seclists.org/fulldisclosure/2018/Oct/42

CVSS

7.5HIGH[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-434

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card