CVE-2020-11527: Zohocorp ManageEngine Opmanager

High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days.

In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files.

Affected products

• Zohocorp ManageEngine Opmanager: before 12.4 (fixed in 12.4); version 12.4 only

Published 2020-04-04. Last modified 2026-06-17.