Lucene search
+L

605 matches found

NVD
NVD
added 2022/05/05 11:15 p.m.22 views

CVE-2022-29535

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

9.8CVSS0.93084EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/05 11:15 p.m.30 views

Sql injection

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

7.5CVSS9.8AI score0.93084EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/05/05 10:17 p.m.133 views

CVE-2022-29535

Summary: CVE-2022-29535 affects Zoho ManageEngine OPManager (version 125588 and prior). Multiple connected sources describe a SQL injection vulnerability that can be exploited via some default reports, enabling remote attackers to execute arbitrary SQL commands. The issue is confirmed across NVD,...

9.8CVSS9.8AI score0.93084EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/05 10:17 p.m.31 views

CVE-2022-29535

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

10AI score0.93084EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/05/05 12:0 a.m.10 views

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...

9.8CVSS8.7AI score0.93084EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/18 1:15 p.m.9 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS7.4AI score0.37719EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/18 1:15 p.m.21 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS0.37719EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/18 1:15 p.m.5 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS7.3AI score0.37719EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/18 1:15 p.m.19 views

Sql injection

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

6.5CVSS8.9AI score0.37719EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/18 12:17 p.m.71 views

CVE-2022-27908

Zoho ManageEngine OpManager is affected by an authenticated SQL injection in the Inventory Reports module, affecting versions prior to 125588 (and prior to 125603). The vulnerability arises from unsanitized input in the Inventory Reports functionality, enabling an attacker with valid credentials ...

8.8CVSS8.9AI score0.37719EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/18 12:17 p.m.25 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

9.2AI score0.37719EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/18 12:0 a.m.11 views

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO USA. A SQL injection vulnerability exists in versions prior to ZOHO ManageEngine OpManager 125588 and 125603, which stems from a problem in the inventory reporting module. An attacker could use this vulnerability...

8.8CVSS5.9AI score0.37719EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/12/12 12:0 a.m.39 views

Zoho Corporation ManageEngine OpManager Licensing Issue Vulnerability

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

9.8CVSS2.9AI score0.05351EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/09 8:15 p.m.4 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS7.3AI score0.05351EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/09 8:15 p.m.20 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS0.05351EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/09 8:15 p.m.6 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS7.3AI score0.05351EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/09 8:15 p.m.18 views

Authentication flaw

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

7.5CVSS9.5AI score0.05351EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/09 7:15 p.m.24 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8AI score0.05351EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/09 7:15 p.m.56 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before build 125490 contains an authentication flaw that mishandles access to audit directories, enabling unauthenticated access to sensitive audit areas. CVSS data indicates high to critical impact (C/H, I/H, A/H) with network attack vector and no user...

9.8CVSS9.5AI score0.05351EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/09 12:0 a.m.7 views

Zoho Corporation ManageEngine OpManager 授权问题漏洞

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

9.8CVSS5.5AI score0.05351EPSS
SaveExploits0References4
Rows per page
Query Builder