Skip to content
OpenAdvisories
Medium · 4.6 CVE-2025-9226 EUVD-2025-206580GHSA-rv8x-5qhg-m8hq

Stored XSS

Published Jan 30, 2026 · Updated Feb 2, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine OpManager < 128582 128582
Zohocorp ManageEngine NetFlow Analyzer < 128582 128582
Zohocorp ManageEngine OpUtils < 128582 128582

References