CVE-2020-11946

Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call

published April 20, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
98.9
In the wild
Unconfirmed
What it is

Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51798 · 98.9th percentile
Published
2020-04-20T20:18Z
EPSS history
Timeline
  • 20 APR 20:18Z
    Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call
    cvelistv5