How many ManageEngine OpManager CVEs are in CISA KEV?

None of ManageEngine OpManager's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ManageEngine OpManager are affected?

9 distinct ManageEngine OpManager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ManageEngine OpManager CVEs?

ManageEngine OpManager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical ManageEngine OpManager vulnerabilities are there?

ManageEngine OpManager has 1 critical and 1 high-severity CVEs.

What is the average severity of ManageEngine OpManager CVEs?

The average CVSS base score across ManageEngine OpManager's scored CVEs is 6.3.

ManageEngine OpManager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: ManageEngine OpManager vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

ManageEngine OpManager has 7 published CVE records since 2007, of which none are in CISA's KEV catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.3. Affected platforms include linux, windows.

Severity and exploitation

How the CVSS severity of ManageEngine OpManager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of ManageEngine OpManager's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of ManageEngine OpManager's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every ManageEngine OpManager version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1285661 CVE
<= 12.5.1741 CVE
<= 1283171 CVE
>= 12.6.1681 CVE
>= 12.7.2581 CVE
128234 <= v < 1282481 CVE
7.01 CVE

Fixed in

1282481 CVE
1285661 CVE

Find a version

7 CVEs

Sort

Reflected XSS
CVE-2025-41437
Patch
CWE-79
Medium · CVSS 4.3
EPSS 0.3% (18th pct)2025-06-09
SQL Injection
CVE-2024-6748CWE-89
High · CVSS 8.3
EPSS 23.8% (98th pct)2024-07-29
Stored XSS
CVE-2024-36038
Patch
CWE-79
Medium · CVSS 6.3
EPSS 1.4% (73th pct)2024-06-24
Critical vulnerability · 2024-01-08
CVE-2023-47211
Public exploit
Patch
CWE-22
Critical · CVSS 9.1
EPSS 47.0% (99th pct)2024-01-08
Medium vulnerability · 2023-03-30
CVE-2022-43473
Public exploit
Patch
CWE-611
Medium · CVSS 5.8
EPSS 19.8% (97th pct)2023-03-30
Medium vulnerability · 2021-09-21
CVE-2020-19554CWE-79
Medium · CVSS 6.1
EPSS 0.6% (48th pct)2021-09-21
Medium vulnerability · 2007-11-08
CVE-2007-5891CWE-79
Medium · CVSS 4.3
EPSS 1.0% (64th pct)2007-11-08

Common weakness types

The CWE weakness categories most often found in ManageEngine OpManager CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ManageEngine OpManager CVEs were published each year.

2021

2022

2023

2024

2025

Other ManageEngine products

Browse vulnerabilities for other products by ManageEngine.

ADAudit Plus38 CVEs Applications Manager14 CVEs ServiceDesk Plus14 CVEs Exchange Reporter Plus8 CVEs Desktop Central6 CVEs ADSelfService Plus5 CVEs Password Manager Pro5 CVEs

Frequently asked questions

Common questions about ManageEngine OpManager vulnerabilities.

How many CVEs does ManageEngine OpManager have?: ManageEngine OpManager has 7 published CVE records since 2007.
How many ManageEngine OpManager CVEs are in CISA KEV?: None of ManageEngine OpManager's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ManageEngine OpManager vulnerabilities?: Yes — 2 of ManageEngine OpManager's CVEs have a known public exploit.
Which versions of ManageEngine OpManager are affected?: 9 distinct ManageEngine OpManager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ManageEngine OpManager CVEs?: ManageEngine OpManager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical ManageEngine OpManager vulnerabilities are there?: ManageEngine OpManager has 1 critical and 1 high-severity CVEs.
What is the average severity of ManageEngine OpManager CVEs?: The average CVSS base score across ManageEngine OpManager's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ManageEngine OpManager vulnerabilities

Get an alert for each new ManageEngine OpManager CVE, with AI-written analysis and remediation steps.

Create an account See pricing