429 matches found
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO USA. A SQL injection vulnerability exists in versions prior to ZOHO ManageEngine OpManager 125588 and 125603, which stems from a problem in the inventory reporting module. An attacker could use this vulnerability...
CVE-2022-27908: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...
Zoho Corporation ManageEngine OpManager Licensing Issue Vulnerability
Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...
CVE-2021-44514
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...
CVE-2021-44514
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...
CVE-2021-44514
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...
CVE-2021-44514
OpUtils in Zoho ManageEngine OpManager 12.5 before build 125490 contains an authentication flaw that mishandles access to audit directories, enabling unauthenticated access to sensitive audit areas. CVSS data indicates high to critical impact (C/H, I/H, A/H) with network attack vector and no user...
CVE-2021-44514: Improper Authentication
OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...
Zoho Corporation ManageEngine OpManager 授权问题漏洞
Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...
PT-2021-24118
Name of the Vulnerable Software and Affected Versions: ManageEngine OpManager versions 12.5 before 125490 Description: The issue concerns the mishandling of authentication for certain audit directories in OpUtils, a component of ManageEngine OpManager. Recommendations: For versions 12.5 before...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88240)
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
CVE-2021-40493
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-41075
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...
CVE-2021-40493: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...
PT-2021-22899
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 125437 Description The issue concerns a SQL Injection vulnerability in the support diagnostics module. This occurs via the pollingObject parameter of the "getDataCollectionFailureReason API"...
ZOHO ManageEngine OpManager SQL注入漏洞
ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...
CVE-2021-41288
Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...