CVE-2020-12116 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 99%

Vendor	Product	Version
zohocorp	manageengine_opmanager	𝑥 ≤ 12.3
zohocorp	manageengine_opmanager	12.4
zohocorp	manageengine_opmanager	12.4:build124000
zohocorp	manageengine_opmanager	12.4:build124011
zohocorp	manageengine_opmanager	12.4:build124012
zohocorp	manageengine_opmanager	12.4:build124013
zohocorp	manageengine_opmanager	12.4:build124014
zohocorp	manageengine_opmanager	12.4:build124015
zohocorp	manageengine_opmanager	12.4:build124016
zohocorp	manageengine_opmanager	12.4:build124022
zohocorp	manageengine_opmanager	12.4:build124023
zohocorp	manageengine_opmanager	12.4:build124024
zohocorp	manageengine_opmanager	12.4:build124025
zohocorp	manageengine_opmanager	12.4:build124026
zohocorp	manageengine_opmanager	12.4:build124027
zohocorp	manageengine_opmanager	12.4:build124030
zohocorp	manageengine_opmanager	12.4:build124033
zohocorp	manageengine_opmanager	12.4:build124037
zohocorp	manageengine_opmanager	12.4:build124039
zohocorp	manageengine_opmanager	12.4:build124040
zohocorp	manageengine_opmanager	12.4:build124041
zohocorp	manageengine_opmanager	12.4:build124042
zohocorp	manageengine_opmanager	12.4:build124043
zohocorp	manageengine_opmanager	12.4:build124051
zohocorp	manageengine_opmanager	12.4:build124053
zohocorp	manageengine_opmanager	12.4:build124054
zohocorp	manageengine_opmanager	12.4:build124056
zohocorp	manageengine_opmanager	12.4:build124058
zohocorp	manageengine_opmanager	12.4:build124065
zohocorp	manageengine_opmanager	12.4:build124066
zohocorp	manageengine_opmanager	12.4:build124067
zohocorp	manageengine_opmanager	12.4:build124069
zohocorp	manageengine_opmanager	12.4:build124070
zohocorp	manageengine_opmanager	12.4:build124071
zohocorp	manageengine_opmanager	12.4:build124072
zohocorp	manageengine_opmanager	12.4:build124074
zohocorp	manageengine_opmanager	12.4:build124075
zohocorp	manageengine_opmanager	12.4:build124081
zohocorp	manageengine_opmanager	12.4:build124082
zohocorp	manageengine_opmanager	12.4:build124085
zohocorp	manageengine_opmanager	12.4:build124086
zohocorp	manageengine_opmanager	12.4:build124087
zohocorp	manageengine_opmanager	12.4:build124089
zohocorp	manageengine_opmanager	12.4:build124095
zohocorp	manageengine_opmanager	12.4:build124096
zohocorp	manageengine_opmanager	12.4:build124097
zohocorp	manageengine_opmanager	12.4:build124098
zohocorp	manageengine_opmanager	12.4:build124099
zohocorp	manageengine_opmanager	12.4:build124100
zohocorp	manageengine_opmanager	12.4:build124101
zohocorp	manageengine_opmanager	12.4:build124102
zohocorp	manageengine_opmanager	12.4:build124168
zohocorp	manageengine_opmanager	12.4:build124169
zohocorp	manageengine_opmanager	12.4:build124175
zohocorp	manageengine_opmanager	12.4:build124176
zohocorp	manageengine_opmanager	12.4:build124178
zohocorp	manageengine_opmanager	12.4:build124181
zohocorp	manageengine_opmanager	12.4:build124182
zohocorp	manageengine_opmanager	12.4:build124183
zohocorp	manageengine_opmanager	12.4:build124189
zohocorp	manageengine_opmanager	12.4:build124190
zohocorp	manageengine_opmanager	12.4:build124191
zohocorp	manageengine_opmanager	12.5:build125000
zohocorp	manageengine_opmanager	12.5:build125002
zohocorp	manageengine_opmanager	12.5:build125100
zohocorp	manageengine_opmanager	12.5:build125101
zohocorp	manageengine_opmanager	12.5:build125102
zohocorp	manageengine_opmanager	12.5:build125108
zohocorp	manageengine_opmanager	12.5:build125110
zohocorp	manageengine_opmanager	12.5:build125111
zohocorp	manageengine_opmanager	12.5:build125112
zohocorp	manageengine_opmanager	12.5:build125113
zohocorp	manageengine_opmanager	12.5:build125114
zohocorp	manageengine_opmanager	12.5:build125116
zohocorp	manageengine_opmanager	12.5:build125117
zohocorp	manageengine_opmanager	12.5:build125118
zohocorp	manageengine_opmanager	12.5:build125120
zohocorp	manageengine_opmanager	12.5:build125121
zohocorp	manageengine_opmanager	12.5:build125123
zohocorp	manageengine_opmanager	12.5:build125124

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

https://www.manageengine.com/network-monitoring/help/read-me-complete.html

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125

https://www.manageengine.com/network-monitoring/help/read-me-complete.html

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125