CVE-2018-18262

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

CVE-2018-18262

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

Cross site scripting

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

CVE-2018-18262

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

CVE-2018-18262: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

PT-2018-14387

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123214 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123214, update to a version that...

Sql injection

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

CVE-2018-17283

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

CVE-2018-17283

Zoho ManageEngine OpManager before 12.3 Build 123196 is affected by an authentication bypass in /oputilsServlet and can be leveraged for SQL injection via /api/json/device/setManaged name parameter or to add an admin user via /api/json/v2/admin/addUser. The vulnerability arises from lack of acces...

PT-2018-13972

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 Build 123196 Description The issue allows unauthorized access to certain API endpoints without requiring authentication. Specifically, the /oputilsServlet endpoint can be exploited to obtain a...

CVE-2018-17283: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

CVE-2018-17243

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

Sql injection

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

CVE-2018-17243

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

CVE-2018-17243

CVE-2018-17243 describes a SQL injection vulnerability in the global search of Zoho ManageEngine OpManager prior to version 12.3 build 123205. The issue arises in the global search feature, enabling attackers to inject arbitrary SQL via input in the affected module. Affected product: ManageEngine...

PT-2018-13963

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 123205 Description The issue allows for SQL Injection in the Global Search feature. Recommendations For versions prior to 12.3 123205, update to version 12.3 123205 or later to resolve the iss...

CVE-2018-17243: Improper Neutralization of Special Elements used in an SQL Command

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2019-24540)

Zoho ManageEngine OpManager is an end-to-end integrated network management software that enables all-round, visual, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the enterprise network...

ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure:...

ManageEngine OpManager 11 - 12.2 Weak Encryption Algorithm Vulnerability

ManageEngine OpManager is prone to a weak encryption algorithm vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...