CVE-2025-9227
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to a Stored XSS vulnerability in the SNMP trap processor. Malicious data may be stored and executed in the user's browser.
Risk Assessment
An attacker could execute a malicious script in the context of an OpManager user's browser, potentially leading to session theft or actions on behalf of the victim.
Recommendation
Update ManageEngine OpManager to a version later than 128609 to remediate the Stored XSS vulnerability.
Other vulnerabilities in ManageEngine OpManager
See all- CVE-2026-76980High
A Data Exposure vulnerability in the Firewall Analyzer syslog collector affects Zoho ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below.
- CVE-2026-76979High
An XML Injection vulnerability in the Rule Tracking Compare Policies feature affects Zoho ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below.
- CVE-2026-76978High
A Command Injection vulnerability in the Diagnose Settings feature affects Zoho ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below.
- CVE-2026-75825High
An Authentication Bypass vulnerability affects Zoho ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled.
- CVE-2026-84791High
A Broken Access Control vulnerability in Zoho ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below allows an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope.
- CVE-2026-84789High
A vulnerability in ZohoCorp ManageEngine OpManager and Firewall Analyzer (versions 12.8.710 and below) allows an authenticated low-privilege user to create alert notifications for firewalls outside their assigned scope. This is a broken access control issue.
- CVE-2026-84787High
A vulnerability in ZohoCorp ManageEngine OpManager and Firewall Analyzer (versions 12.8.710 and below) allows an authenticated low-privilege user to gain Administrator privileges through Report Profile import. This is a privilege escalation issue.
- CVE-2026-15358High
A vulnerability in ZohoCorp ManageEngine OpManager and Network Configuration Manager (versions before 12.8.671) allows an unauthorized Path Traversal attack.
- CVE-2026-14913High
A vulnerability in ZohoCorp ManageEngine OpManager and Firewall Analyzer (versions 12.8.669 and below) allows an SQL Injection attack in Rule Management Search Reports.
Original NVD description (English source)
Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS