VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 4, 2014· Updated Jun 17, 2026

CVE-2014-6034

CVE-2014-6034

Description

Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to and execute arbitrary WAR files via a .. (dot dot) in the regionID parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Zohocorp/Manageengine It360
    cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:*:*:*:*
    Range: <=10.4
  • Zohocorp/Manageengine Opmanager12 versions
    cpe:2.3:a:zohocorp:manageengine_opmanager:10.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:zohocorp:manageengine_opmanager:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:11.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:11.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:8.8:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_opmanager:9.4:*:*:*:*:*:*:*
  • Zohocorp/Manageengine Social It Plus
    cpe:2.3:a:zohocorp:manageengine_social_it_plus:11.0:*:*:*:*:*:*:*
  • Zoho/ManageEngine OpUtilsllm-fuzzy
    Range: >=8.8, <=11.3
  • Zoho/IT360llm-fuzzy
    Range: <=10.4
  • Zoho/Social IT Plusllm-fuzzy
    Range: =11.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.