CVE-2020-28653

Critical · 9.8

CVSS

9.8

EPSS

78.7%

Published

Feb 3, 2021

CISA due date

—

The record

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Affected packages

Ecosystem	Package	Introduced	Fixed