Test ID:	1.3.6.1.4.1.25623.1.0.806053
Category:	Default Accounts
Title:	ManageEngine OpManager <= 11.6 Multiple Vulnerabilities - Active Check
Summary:	ManageEngine OpManager is prone to multiple vulnerabilities.
Description:	Summary: ManageEngine OpManager is prone to multiple vulnerabilities. Vulnerability Insight: It was possible to login with default credentials: IntegrationUser/plugin. Vulnerability Impact: Successful exploitation will allow remote attackers to execute SQL queries on the backend PostgreSQL instance with administrator rights and access shell with SYSTEM privileges. Affected Software/OS: ManageEngine OpManager versions 11.6 and earlier. Solution: Install the patch from the referenced vendor advisory. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7765 https://www.exploit-db.com/exploits/38221/ http://seclists.org/fulldisclosure/2015/Sep/66 http://packetstormsecurity.com/files/133596/ManageEngine-OpManager-Remote-Code-Execution.html http://www.rapid7.com/db/modules/exploit/windows/http/manage_engine_opmanager_rce Common Vulnerability Exposure (CVE) ID: CVE-2015-7766
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.