CVE-2020-28653 | BDVDB-2026-148462 Detail

Description#

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125233
https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125203
http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html

Exploit#

No public exploit known

History#

Version 12021-02-03Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.