What’s Vulnerable › Vulnerabilities

CVE-2020-12116

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 97.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-05-07 · updated 2026-06-17
• Weakness: CWE-22

Description

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request.

Affected products

• Zohocorp ManageEngine OpManager: through 12.3; 12.4, 12.4-build124000, 12.4-build124011, 12.4-build124012, 12.4-build124013, 12.4-build124014 (+73)

References

• https://www.manageengine.com/network-monitoring/help/read-me-complete.html
• https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125
• https://www.manageengine.com/network-monitoring/help/read-me-complete.html
• https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125

Get alerted when CVE-2020-12116 or the next vulnerability affects your stack