Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-41437 EUVD-2025-17454GHSA-wjqp-9vhf-cc8w

Reflected XSS

Published Jun 9, 2025 · Updated Jun 9, 2025 · Assigned by Zohocorp

Description

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page.

Affected products

VendorProductAffectedFixed
ManageEngine OpManager < 128566 128566

References