Lucene search
+L

757 matches found

NVD
NVD
•added 2022/04/18 1:15 p.m.•25 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS0.36489EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/18 1:15 p.m.•10 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS7.3AI score0.36489EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/18 1:15 p.m.•25 views

Sql injection

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

6.5CVSS8.9AI score0.36489EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/18 12:17 p.m.•87 views

CVE-2022-27908

Zoho ManageEngine OpManager is affected by an authenticated SQL injection in the Inventory Reports module, affecting versions prior to 125588 (and prior to 125603). The vulnerability arises from unsanitized input in the Inventory Reports functionality, enabling an attacker with valid credentials ...

8.8CVSS8.9AI score0.36489EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/18 12:17 p.m.•30 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

9.2AI score0.36489EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/18 12:00 a.m.•24 views

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO USA. A SQL injection vulnerability exists in versions prior to ZOHO ManageEngine OpManager 125588 and 125603, which stems from a problem in the inventory reporting module. An attacker could use this vulnerability...

8.8CVSS5.9AI score0.36489EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/18 12:00 a.m.•1 views

CVE-2022-27908: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS7.8AI score0.36489EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•51 views

Zoho Corporation ManageEngine OpManager Licensing Issue Vulnerability

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

9.8CVSS2.9AI score0.05525EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/09 8:15 p.m.•26 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS0.05525EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/09 8:15 p.m.•12 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS7.3AI score0.05525EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/09 8:15 p.m.•12 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS7.3AI score0.05525EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/09 8:15 p.m.•25 views

Authentication flaw

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

7.5CVSS9.5AI score0.05525EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/09 7:15 p.m.•32 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8AI score0.05525EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/09 7:15 p.m.•70 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before build 125490 contains an authentication flaw that mishandles access to audit directories, enabling unauthenticated access to sensitive audit areas. CVSS data indicates high to critical impact (C/H, I/H, A/H) with network attack vector and no user...

9.8CVSS9.5AI score0.05525EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/09 12:00 a.m.•5 views

CVE-2021-44514: Improper Authentication

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS5.8AI score0.05525EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/09 12:00 a.m.•18 views

Zoho Corporation ManageEngine OpManager 授权问题漏洞

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

9.8CVSS5.5AI score0.05525EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/10/14 12:00 a.m.•76 views

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88241)

ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...

9.8CVSS3.8AI score0.03432EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/14 12:00 a.m.•23 views

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88240)

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

9.8CVSS7.6AI score0.50209EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/13 11:15 p.m.•26 views

CVE-2021-40493

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...

9.8CVSS0.50209EPSS
SaveExploits0References1
OSV
OSV
•added 2021/10/13 11:15 p.m.•13 views

CVE-2021-40493

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...

9.8CVSS5.8AI score0.50209EPSS
SaveExploits0References1
Rows per page
Query Builder