CVE-2020-28653 ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization · CloudMap

严重CVE-2020-28653RCE

ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization

披露于 2021/02/03 · 更新于 2026/01/12

CVSS 评分9.8/ 10.0

EPSS 概率81.8%百分位 99.1%

漏洞描述

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

影响产品

卓豪技术有限公司manageengine_opmanager查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

www.manageengine.comhttps://www.manageengine.com/network-monitoring/help/read-me-complete.html#125233↗www.manageengine.comhttps://www.manageengine.com/network-monitoring/help/read-me-complete.html#125203↗packetstormsecurity.comhttp://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html↗

RELATED INTELLIGENCE

同产品关联漏洞

与 manageengine_opmanager 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-36923 Zoho ManageEngine - getUserAPIKey Authentication Bypass manageengine_firewall_analyzer OpManager-Plus manageengine_netflow_analyzer+1	高危	—	—	PoCEXP	2026/01/05
CVE-2021-3287 Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution manageengine_opmanager	严重	9.8	71.1%	PoCEXP	2021/04/22
CVE-2020-13818 CVE-2020-13818 OpManager-Plus manageengine_opmanager	高危	7.5	76.6%	PoCEXP	2020/06/04
CVE-2020-12116 Zoho ManageEngine OpManger - Arbitrary File Read manageengine_opmanager	高危	7.5	90.5%	PoCEXP	2020/05/07
CVE-2018-17283 Zoho ManageEngine OpManager - SQL Injection manageengine_opmanager	高危	7.5	35.8%	PoCEXP	2018/09/21
CVE-2015-7766RCE CVE-2015-7766 OpManager-Plus manageengine_opmanager	严重	9.0	77.5%	PoCEXP	2015/10/09