Zoho ManageEngine SQL Injection (CVE-2021-41288)

A SQL injection vulnerability exists in ManageEngine OpManager. This vulnerability is due to insufficient validation of the parameters in the HTTP requests processed by the getReportData method...

CVE-2021-41288

CVE-2021-41288 affects Zoho ManageEngine OpManager (version 125466 and earlier). A SQL injection vulnerability exists in the getReportData API due to insufficient validation of HTTP request parameters, enabling an attacker to manipulate/compromise the application database. NVD lists CVSS vectors:...

CVE-2021-41288: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...

PT-2021-23242

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions 125466 and below Description The issue concerns SQL Injection in the getReportData API endpoint. This allows for potential exploitation. No information is provided about the estimated number of affected...