757 matches found
CVE-2017-11560: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload an HTML file. This HTML file is then rendered in various locations of the application. JavaScript inside the uploaded HTML is also interpreted by the applicatio...
CVE-2017-11559: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-20338)
A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests. Successful exploitation could lead to arbitrary SQL code execution...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-20173)
A SQL injection vulnerability exists in ManageEngine. This vulnerability is due to insufficient validation of parameters. Successful exploitation could lead to arbitrary SQL code execution...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-17823; CVE-2018-17283)
An SQL injection vulnerability exists in ManageEngine. This vulnerability is due to insufficient validation of the name parameter when processing requests sent. Successful exploitation could lead to arbitrary SQL code execution in the security context of database service...
Zoho ManageEngine OpManager Insecure Deserialization (CVE-2018-19403)
An insecure deserialization vulnerability has been reported in ManageEngine OpManager.The vulnerability is due to deserialization of untrusted data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
ManageEngine OpManager Detection Consolidation
Consolidation of ManageEngine OpManager detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-9088)
An SQL injection vulnerability exists in ManageEngine. This vulnerability is due to insufficient validation of the parameter in Java class. Successful exploitation could lead to arbitrary code execution in the security context of database service...
ManageEngine OpManager Detection (Windows SMB Login)
SMB login-based detection of ManageEngine OpManager. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zoho ManageEngine OpManager SQL Injection (CVE-2018-18949)
An SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the mailservername. Successful exploitation could lead to arbitrary code execution in the security context of database service...
ManageEngine OpManager 12.3 Privilege Escalation
ManageEngine OpManager Privilege Escalation Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.3 Summary: OpManager offers comprehensive network monitoring capabilities that help you monitor network performance, detect network faults in real tim...
ManageEngine OpManager Privilege Escalation
Summary OpManager offers comprehensive network monitoring capabilities that help you monitor network performance, detect network faults in real time, troubleshoot errors, and prevent downtime. Being a powerful network monitor, it supports multi-vendor IT environments and can scale to fit your...
ManageEngine OpManager 12.3 SQL Injection
SQL Injection vulnerability in ManageEngine OpManager getGraphData API Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2018-26464)
ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A SQL injection vulnerability exists in the Alarms section of ZOHO ManageEngine OpManager prior to version 12.3 build 123239. A remote attacker can exploit this vulnerability to execute...
Zoho ManageEngine OpManager cross-site scripting vulnerability (CNVD-2018-26472)
ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A cross-site scripting vulnerability exists in the Notes column of the Alarms section in versions prior to ZOHO ManageEngine OpManager 12.3 build 123239. A remote attacker can exploit this...
Sql injection
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
Code injection
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
CVE-2018-20338
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
