VulnerabilityModified

CVE-2023-31099

Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.

HIGH 8.8EPSS 81.6%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 81.6%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 81.56% probability · 100th percentile
CISA KEV: Not listed
Affected: zohocorp/manageengine opmanager
Source: cve@mitre.org

References

https://manageengine.comProduct
https://www.manageengine.com/network-monitoring/security-updates/cve-2023-31099.htmlVendor Advisory
https://manageengine.comProduct
https://www.manageengine.com/network-monitoring/security-updates/cve-2023-31099.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.