What is the CVSS score of CVE-2023-47211?

CVE-2023-47211 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L. EPSS exploitation probability: 81.6%.

Which versions of Manageengine Firewall Analyzer are affected by CVE-2023-47211?

CVE-2023-47211 presents critical security risk, a path traversal vulnerability rated CVSS 9.1.

Is there a public PoC exploit available for CVE-2023-47211?

Yes, a public proof-of-concept exploit is available for CVE-2023-47211. Prioritise patching immediately. EPSS: 81.6%.

How to fix or mitigate CVE-2023-47211?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Review file handling controls and restrict upload directories.

Manageengine Firewall Analyzer CVE-2023-47211

CRITICAL

Path Traversal (CWE-22)

2024-01-08 talos-cna@cisco.com

Path Traversal Manageengine Firewall Analyzer Manageengine Netflow Analyzer Manageengine Network Configuration Manager Manageengine Opmanager Manageengine Opmanager Msp Manageengine Opmanager Plus Manageengine Oputils

9.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:34 vuln.today

PoC Detected

Nov 04, 2025 - 19:16 vuln.today

Public exploit code

CVE Published

Jan 08, 2024 - 15:15 nvd

CRITICAL 9.1

DescriptionCVE.org

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.

AnalysisAI

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.6%.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. Affected products include: Zohocorp Manageengine Firewall Analyzer, Zohocorp Manageengine Netflow Analyzer, Zohocorp Manageengine Network Configuration Manager, Zohocorp Manageengine Opmanager, Zohocorp Manageengine Opmanager Msp.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.