ManageEngine vulnerabilities
3 known CVE vulnerabilities in ManageEngine, translated and rated.
- CVE-2026-12370High
ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below are vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.
- CVE-2022-47966CriticalActively exploited
Remote code execution vulnerability in multiple Zoho ManageEngine on-premise products due to Apache Santuario xmlsec 1.4.1, where XSLT features are not properly secured. Exploitation only possible if SAML SSO has been configured.
- CVE-2026-2740High
Authenticated remote code execution vulnerability in Zohocorp ManageEngine products: ADSelfService Plus before 6525, DataSecurity Plus before 6264, and RecoveryManager Plus before 6313. Caused by a bug in a third-party dependency.