CVE-2022-35404

HIGH

ManageEngine OPManager < 12.5 - Unauthenticated Arbitrary File and Directory Creation

Title source: llm

Description

ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and directory creation on a server machine.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://manageengine.com

Patch, Vendor Advisory x_refsource_misc

https://www.manageengine.com/itom/advisory/cve-2022-35404.html

Scores

CVSS v3 8.2

EPSS 0.0112

EPSS Percentile 78.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Details

CWE

CWE-20

Status published

Products (1)

zohocorp/manageengine_firewall_analyzer 12.5 (50 CPE variants)

Published Jul 18, 2022

Tracked Since Feb 18, 2026