{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-10-19T00:00:00", "descriptions": [{"lang": "en", "value": "Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-23T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html"}, {"name": "20181019 Zoho ManageEngine OpManager 12.3 allows Unrestricted Arbitrary File Upload", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2018/Oct/42"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2018-18475", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html"}, {"name": "20181019 Zoho ManageEngine OpManager 12.3 allows Unrestricted Arbitrary File Upload", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2018/Oct/42"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-18475", "datePublished": "2018-10-23T21:00:00", "dateReserved": "2018-10-18T00:00:00", "dateUpdated": "2018-10-23T20:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123001:*:*:*:*:*:*", "matchCriteriaId": "86EB5F5D-FA8C-4B65-93D3-3B05579C3E32", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123002:*:*:*:*:*:*", "matchCriteriaId": "686CBBE4-045A-4114-98BA-CE397D103DA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123003:*:*:*:*:*:*", "matchCriteriaId": "0ED75046-7450-4AEF-BCF8-0643FE9DD02C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123004:*:*:*:*:*:*", "matchCriteriaId": "9AC5C2AC-B31B-4759-8279-9E2846C09AD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123005:*:*:*:*:*:*", "matchCriteriaId": "2D3150D9-2411-47A3-912E-2A7B81012E7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123006:*:*:*:*:*:*", "matchCriteriaId": "EF11B001-835D-4F2A-9CE4-AAD28F830038", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123007:*:*:*:*:*:*", "matchCriteriaId": "563BCC3B-5CC5-437F-91F1-A4AB7063489E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123008:*:*:*:*:*:*", "matchCriteriaId": "6400A3F5-333F-4209-A4C7-C57E2A69B455", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123009:*:*:*:*:*:*", "matchCriteriaId": "9FEB2E01-6815-4D38-8120-DEC41C778A83", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123010:*:*:*:*:*:*", "matchCriteriaId": "8C34E591-6A6F-4363-A2CF-A5C22E97F475", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123011:*:*:*:*:*:*", "matchCriteriaId": "48C8197C-0662-427F-80EB-1D43E13A8188", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123012:*:*:*:*:*:*", "matchCriteriaId": "9774BC15-7D33-4E73-91A6-FBE6D836AEE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123013:*:*:*:*:*:*", "matchCriteriaId": "65125E3F-65D7-4178-8256-1DFA4F7EE8A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123014:*:*:*:*:*:*", "matchCriteriaId": "47DF37DF-1A58-445F-91FF-5F42DA8144AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123015:*:*:*:*:*:*", "matchCriteriaId": "0FE05E0C-2A98-4F1F-AFB9-08DD10394403", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123021:*:*:*:*:*:*", "matchCriteriaId": "88EFA32A-390D-481C-B261-3445F1937018", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123022:*:*:*:*:*:*", "matchCriteriaId": "C5709B4B-2C63-45C5-ABAD-EB320C20A85F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123023:*:*:*:*:*:*", "matchCriteriaId": "068147C0-404F-4573-964C-7BBB1ADA6202", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123024:*:*:*:*:*:*", "matchCriteriaId": "1E9630D5-5759-416A-A460-8166134C8C74", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123025:*:*:*:*:*:*", "matchCriteriaId": "1A1A9B60-D6A3-41C7-9487-5A46043EE012", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123026:*:*:*:*:*:*", "matchCriteriaId": "B697D006-8945-4CF7-B571-92A212684CD6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123027:*:*:*:*:*:*", "matchCriteriaId": "F028F31A-9273-43D8-8495-9D429394426D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123028:*:*:*:*:*:*", "matchCriteriaId": "117334A2-6518-4703-8C73-5B6A9D08D8FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123029:*:*:*:*:*:*", "matchCriteriaId": "31C006D0-3B9B-4BE6-8A9F-5EAD2E689373", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123030:*:*:*:*:*:*", "matchCriteriaId": "933E68D4-6C02-4582-AC5F-812A578FFD1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123031:*:*:*:*:*:*", "matchCriteriaId": "BAC430B6-52E2-4912-B1FD-9C7FB5D78BDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123032:*:*:*:*:*:*", "matchCriteriaId": "75DE01FC-38A4-4C86-88C0-573686AD5989", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123033:*:*:*:*:*:*", "matchCriteriaId": "7157CF3A-F41F-4019-A22A-EF11EFE1BEE7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123034:*:*:*:*:*:*", "matchCriteriaId": "32BADD0E-8892-4BC2-B00C-8CBE9A71CACB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123035:*:*:*:*:*:*", "matchCriteriaId": "737F0FA9-B08D-4CBA-A4A9-F5694DF94A40", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123036:*:*:*:*:*:*", "matchCriteriaId": "7235E285-FD10-47BD-A813-0E99545A475A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123037:*:*:*:*:*:*", "matchCriteriaId": "2674AF0C-1933-4A67-81B6-33367BA2B47A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123043:*:*:*:*:*:*", "matchCriteriaId": "D3496F4B-11F9-46C0-B3D0-EF72781F82E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123044:*:*:*:*:*:*", "matchCriteriaId": "53B6CDCF-6DB1-417D-AF2A-41FB4C9FA038", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123045:*:*:*:*:*:*", "matchCriteriaId": "884B89C3-F8A0-41BA-A485-2C4B9B26B5F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123046:*:*:*:*:*:*", "matchCriteriaId": "465178DC-8C4A-4E77-9837-D50892CD817F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123047:*:*:*:*:*:*", "matchCriteriaId": "BF26A72D-C2DA-4FCE-8FE1-6C60CF5B9B4A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123048:*:*:*:*:*:*", "matchCriteriaId": "B74591DE-ABC2-49DF-9761-0E3EC88CACF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123049:*:*:*:*:*:*", "matchCriteriaId": "BCFD5A1C-6B9F-4C9E-9183-D891A4955A8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123050:*:*:*:*:*:*", "matchCriteriaId": "F6391BA4-7D59-489A-8B4E-66E0F77273CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123051:*:*:*:*:*:*", "matchCriteriaId": "742B696E-8E4B-417F-97F6-3A131D0017C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123052:*:*:*:*:*:*", "matchCriteriaId": "20F9623B-3CA5-4128-A626-696FAD2E938D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123053:*:*:*:*:*:*", "matchCriteriaId": "364BAF6B-C6E2-4977-883B-51E2D367CC0D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123054:*:*:*:*:*:*", "matchCriteriaId": "FF514A1F-F83E-46A7-A217-18ECD45E1D7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123055:*:*:*:*:*:*", "matchCriteriaId": "9EB86D22-755C-49D8-83C6-4DE640C48552", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123056:*:*:*:*:*:*", "matchCriteriaId": "C8D3EBBA-C152-4424-837E-4A1D59610063", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123057:*:*:*:*:*:*", "matchCriteriaId": "C5463E70-77A0-4420-B346-BDB1B31CFD76", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123062:*:*:*:*:*:*", "matchCriteriaId": "AA0AF4B5-3B69-48AB-B6EA-096F2042B914", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123063:*:*:*:*:*:*", "matchCriteriaId": "664A0889-B9F7-4F96-B57E-A72108958EA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123064:*:*:*:*:*:*", "matchCriteriaId": "20AAF0D8-9E04-4BF3-8707-760C60C6B816", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123065:*:*:*:*:*:*", "matchCriteriaId": "5B523991-88CD-4E23-A18F-E42D1F8EA9F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123066:*:*:*:*:*:*", "matchCriteriaId": "EBCA0076-38A6-447C-A2AE-10AFFECE6D24", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123067:*:*:*:*:*:*", "matchCriteriaId": "6108E08D-8F7C-4F69-A7DE-B34FF2811B77", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123068:*:*:*:*:*:*", "matchCriteriaId": "2C030BDF-CDEA-498E-A755-C3A25D9D5024", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123069:*:*:*:*:*:*", "matchCriteriaId": "F492EAA6-DB82-4653-9ABE-DE41B5B4F17F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123070:*:*:*:*:*:*", "matchCriteriaId": "DE8C8A77-2C7A-42A5-AAB1-CFA4E431E7D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123076:*:*:*:*:*:*", "matchCriteriaId": "A799504A-CA2F-4F79-B251-F09CC856378D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123077:*:*:*:*:*:*", "matchCriteriaId": "31C0753B-F3EB-4BF3-86C1-FF590552C721", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123078:*:*:*:*:*:*", "matchCriteriaId": "7FAD4420-5942-482E-9E90-FD42DAFAE505", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123079:*:*:*:*:*:*", "matchCriteriaId": "EA22B2CB-43A4-40C4-A104-8EB7B52F47C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123080:*:*:*:*:*:*", "matchCriteriaId": "0627E0C8-24F8-4BD2-B48B-80C75FF9B308", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123081:*:*:*:*:*:*", "matchCriteriaId": "19C2CE00-9302-4700-BAFE-81A42A50CE53", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123082:*:*:*:*:*:*", "matchCriteriaId": "A3D88293-837A-4112-83E9-34E87E636E5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123083:*:*:*:*:*:*", "matchCriteriaId": "BBA2ED18-B159-4F01-8B91-22B73924C324", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123084:*:*:*:*:*:*", "matchCriteriaId": "56FB1C69-5667-47A3-B286-DD193A14E3A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123086:*:*:*:*:*:*", "matchCriteriaId": "01D0B726-FB28-4DDB-AF14-0EF4D5D0C255", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123090:*:*:*:*:*:*", "matchCriteriaId": "01EC4348-26DA-41BE-81B3-A0F82DD3C2E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123091:*:*:*:*:*:*", "matchCriteriaId": "87967B7F-8502-4A07-BF23-760AB427A674", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123092:*:*:*:*:*:*", "matchCriteriaId": "6BFBDAF9-81D3-49E7-A6E7-2041E34D0E88", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123093:*:*:*:*:*:*", "matchCriteriaId": "92283FA5-E9BF-4526-8335-21CAC337507A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123104:*:*:*:*:*:*", "matchCriteriaId": "4E7DBDD1-5CD0-48E6-8DD1-BF32C38A4CF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123105:*:*:*:*:*:*", "matchCriteriaId": "D62F2677-2A2B-4BC3-B165-D3EEF7013A03", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123106:*:*:*:*:*:*", "matchCriteriaId": "BA918111-577F-4A12-9EBC-E9AED63CA98C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123107:*:*:*:*:*:*", "matchCriteriaId": "F0934788-71B1-4BEA-BF01-4BDD87B3F8A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123108:*:*:*:*:*:*", "matchCriteriaId": "A1CA9C41-987C-48F1-831D-67ADB6F2C020", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123109:*:*:*:*:*:*", "matchCriteriaId": "892F3D78-767F-4D09-A465-E875EF27C595", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123110:*:*:*:*:*:*", "matchCriteriaId": "9FA31E62-2C3A-416D-B472-2BB20981274F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123111:*:*:*:*:*:*", "matchCriteriaId": "E1791915-2039-4108-AEC2-7505D7CF4A09", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123112:*:*:*:*:*:*", "matchCriteriaId": "9B8E718C-D235-4393-8839-C715C9391406", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123113:*:*:*:*:*:*", "matchCriteriaId": "C746C3B4-B96C-4277-BCF1-9F3FBE4E52C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123114:*:*:*:*:*:*", "matchCriteriaId": "506FC691-EF45-407F-AB6F-A6260C7F5825", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123115:*:*:*:*:*:*", "matchCriteriaId": "7F77AF32-BDB4-4366-8CC6-51452FC7C01C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123116:*:*:*:*:*:*", "matchCriteriaId": "5C72DC47-6E38-4C4D-BAC4-11FC8CA15D35", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123117:*:*:*:*:*:*", "matchCriteriaId": "F056F4E7-5FFF-4F7D-A2A0-B90E818A8BE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123118:*:*:*:*:*:*", "matchCriteriaId": "30BEFF4D-8F03-4DEA-9441-3C8009DC0D5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123119:*:*:*:*:*:*", "matchCriteriaId": "194EF105-2F2C-4FBE-83EA-99E46A3E1A41", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123120:*:*:*:*:*:*", "matchCriteriaId": "5A3BB136-FB9D-4326-BB92-E3E95FF3D0E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123121:*:*:*:*:*:*", "matchCriteriaId": "25ED8015-6FF6-4762-A3CE-C765F3DFC2EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123122:*:*:*:*:*:*", "matchCriteriaId": "2D0A8CFE-0EC7-4798-8F78-A95CFDD46DCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123123:*:*:*:*:*:*", "matchCriteriaId": "181D3E21-D22B-43DC-AB61-85EADB051DF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123124:*:*:*:*:*:*", "matchCriteriaId": "8623755B-843B-4A35-9EA1-DDADC6D04790", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123125:*:*:*:*:*:*", "matchCriteriaId": "5069B771-C164-42B6-A69E-E7FB6D1659BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123126:*:*:*:*:*:*", "matchCriteriaId": "2A54234E-07E7-4E2B-B6B1-3D9593EECA87", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123127:*:*:*:*:*:*", "matchCriteriaId": "D8199FCF-96B0-4F2A-9843-C58794D9AA4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123136:*:*:*:*:*:*", "matchCriteriaId": "3A1FA00E-7E1C-4DD3-85ED-6FE876EB3070", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123137:*:*:*:*:*:*", "matchCriteriaId": "7913B5C1-8918-4B72-9EE5-7CC566ABC06A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123147:*:*:*:*:*:*", "matchCriteriaId": "EF306D16-22D0-4021-9AEA-58037B8E1817", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123148:*:*:*:*:*:*", "matchCriteriaId": "EB9F1053-4BEA-41CC-8690-7CD91A93809E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123149:*:*:*:*:*:*", "matchCriteriaId": "71DC8E77-BEA1-4C5D-A893-F0B1777914F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123150:*:*:*:*:*:*", "matchCriteriaId": "284144C0-7D49-4B3D-AFD0-1B5CB588E8AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123156:*:*:*:*:*:*", "matchCriteriaId": "E929F1C7-6360-4B62-BCA2-481E6BDA9343", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123157:*:*:*:*:*:*", "matchCriteriaId": "D631CE06-3699-41EF-A16A-29317863EE5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123158:*:*:*:*:*:*", "matchCriteriaId": "DEBF570C-37E6-495E-B440-1BE770B52C6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123159:*:*:*:*:*:*", "matchCriteriaId": "E77B59F9-C293-4825-9C20-0217913FFCE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123160:*:*:*:*:*:*", "matchCriteriaId": "4E47C098-A3A5-430F-9868-76AFD1F4880A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123161:*:*:*:*:*:*", "matchCriteriaId": "003FD386-8F7C-419E-A32A-56BCDE939758", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123162:*:*:*:*:*:*", "matchCriteriaId": "B0CE1909-73A7-4985-91BD-2504EAEEC7B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123163:*:*:*:*:*:*", "matchCriteriaId": "5432A121-8A79-4BB7-BA34-889F268862BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123164:*:*:*:*:*:*", "matchCriteriaId": "D7A1BDA3-BC80-4713-9A61-368D0D2034C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123165:*:*:*:*:*:*", "matchCriteriaId": "595A8799-10FD-4CBD-A31D-862AF3811D25", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123166:*:*:*:*:*:*", "matchCriteriaId": "A8DB1791-3C3D-4B32-A053-F32CF75157AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123167:*:*:*:*:*:*", "matchCriteriaId": "F80D628A-0EEE-4CAE-B554-FF049563486C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123168:*:*:*:*:*:*", "matchCriteriaId": "7D6C0821-9F50-46F1-9D80-716084D4D449", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123169:*:*:*:*:*:*", "matchCriteriaId": "26272C3B-E7F4-422B-8820-5D1E1060B449", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123175:*:*:*:*:*:*", "matchCriteriaId": "0D93D99C-237B-4C71-A287-ECDE1576E045", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123176:*:*:*:*:*:*", "matchCriteriaId": "908CDBFD-130A-4C5C-BFB6-2D2C71E4F7B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123177:*:*:*:*:*:*", "matchCriteriaId": "FA117A3F-5FEF-41B4-AE65-49BC47FFCF56", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123178:*:*:*:*:*:*", "matchCriteriaId": "1524EFB3-8B49-4002-800E-2C222EDFA894", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123179:*:*:*:*:*:*", "matchCriteriaId": "59C93D3E-9E2F-434D-ACBB-0DDA7365AA0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123180:*:*:*:*:*:*", "matchCriteriaId": "A26D17E0-8283-4C03-86F8-CCCA8586D54E", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123181:*:*:*:*:*:*", "matchCriteriaId": "9A1A7F93-72B0-474B-A670-FF0D60824FD1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123182:*:*:*:*:*:*", "matchCriteriaId": "70FDBF91-DDC1-48FC-B99B-37DF3F804AE7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123183:*:*:*:*:*:*", "matchCriteriaId": "459A77F8-CC7C-4017-8D35-58C3266C0804", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123184:*:*:*:*:*:*", "matchCriteriaId": "FA91D7C0-DB3B-4366-907B-3E1202930466", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123185:*:*:*:*:*:*", "matchCriteriaId": "873F377A-6CEE-4FF2-8471-AEEF49E27901", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123186:*:*:*:*:*:*", "matchCriteriaId": "7C72013D-D878-4E62-9795-007F34449121", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123187:*:*:*:*:*:*", "matchCriteriaId": "2C37D72E-9307-455D-92E6-98CC28E1531B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123188:*:*:*:*:*:*", "matchCriteriaId": "5A56B778-8672-402C-87A9-E20D8779F29C", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123189:*:*:*:*:*:*", "matchCriteriaId": "64757ED0-29EA-45FB-80F5-A1E036343535", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123190:*:*:*:*:*:*", "matchCriteriaId": "C265797E-90CF-40FA-A6F1-A98C5DCC5EB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123191:*:*:*:*:*:*", "matchCriteriaId": "524E2761-4B43-46FC-AE7E-134476556B92", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123192:*:*:*:*:*:*", "matchCriteriaId": "A4F53CF6-5783-43A2-BCF7-8E3872ABD922", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123193:*:*:*:*:*:*", "matchCriteriaId": "F7530700-4F71-4E70-AF45-9D57CE331FCF", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123194:*:*:*:*:*:*", "matchCriteriaId": "3B75AA05-6FFE-417A-8026-06F37B573569", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123195:*:*:*:*:*:*", "matchCriteriaId": "EBC6E300-0ECB-40C3-AEB8-25123B6F0AFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123196:*:*:*:*:*:*", "matchCriteriaId": "DE6DAAFC-EE46-4E9F-A218-B9F2178D0BE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123197:*:*:*:*:*:*", "matchCriteriaId": "A2C3EB60-492F-45F2-9B47-83860FCC87D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123198:*:*:*:*:*:*", "matchCriteriaId": "528D8F67-661C-4583-BB59-79CAC093BBEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123204:*:*:*:*:*:*", "matchCriteriaId": "135E8785-833E-4E32-BAC1-173F770FC690", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123205:*:*:*:*:*:*", "matchCriteriaId": "438499EB-654C-4762-978C-BA3FE967C6AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123206:*:*:*:*:*:*", "matchCriteriaId": "12C18281-5741-488D-89D7-125711D1A7BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123207:*:*:*:*:*:*", "matchCriteriaId": "A190DAB6-D0AA-4634-9415-5A4902CDB25B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123208:*:*:*:*:*:*", "matchCriteriaId": "7C7B430C-B9A7-4AEC-84AB-90E08895A330", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload."}, {"lang": "es", "value": "Zoho ManageEngine OpManager en versiones anteriores a la 12.3 build 123214 permite la subida de archivos arbitrarios sin restricci\u00f3n."}], "id": "CVE-2018-18475", "lastModified": "2021-05-04T15:06:50.520", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-10-23T21:30:54.347", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2018/Oct/42"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}