CVE

CVE-2020-28653

9.8

CVSS

Description

Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

Attack Vector

Privileges Req.

User Interaction

Updated Oct 23, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2020-28653 Scanner

CVE-2020-28653 Scanner - Java Deserialization vulnerability in ManageEngine OpManager

Used 2.9k times · 3.4k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →