Sql injection

2022-04-1813:15:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.

CPENameOperatorVersion
manageengine_opmanagerlt12.5
manageengine_opmanagereq12.5
manageengine_opmanagereq12.5 build125233
manageengine_opmanagereq12.5 build125312
manageengine_opmanagereq12.5 build125323
manageengine_opmanagereq12.5 build125324
manageengine_opmanagereq12.5 build125326
manageengine_opmanagereq12.5 build125328
manageengine_opmanagereq12.5 build125000
manageengine_opmanagereq12.5 build125002

Name	Operator	Version
manageengine_opmanager	lt	12.5
manageengine_opmanager	eq	12.5
manageengine_opmanager	eq	12.5 build125233
manageengine_opmanager	eq	12.5 build125312
manageengine_opmanager	eq	12.5 build125323
manageengine_opmanager	eq	12.5 build125324
manageengine_opmanager	eq	12.5 build125326
manageengine_opmanager	eq	12.5 build125328
manageengine_opmanager	eq	12.5 build125000
manageengine_opmanager	eq	12.5 build125002