Lucene search
+L

257 matches found

OSV
OSV
added 2022/08/10 8:16 p.m.7 views

CVE-2022-37024

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution...

8.8CVSS6AI score0.78679EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:16 p.m.5 views

CVE-2022-37024

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution...

8.8CVSS7.6AI score0.78679EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/10 12:00 a.m.8 views

PT-2022-23689

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions before 2022-07-27 through 2022-07-28 Zoho ManageEngine OpManager Plus versions before 2022-07-27 through 2022-07-28 Zoho ManageEngine OpManager MSP versions before 2022-07-27 through 2022-07-28 Zoho...

7.5CVSS7.5AI score0.071EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2022/05/05 11:15 p.m.4 views

CVE-2022-29535

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

9.8CVSS6AI score0.9218EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/05 11:15 p.m.33 views

Sql injection

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

7.5CVSS9.8AI score0.9218EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/04/18 1:15 p.m.11 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS7.4AI score0.36489EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/18 1:15 p.m.22 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS0.36489EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/18 1:15 p.m.6 views

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

8.8CVSS7.3AI score0.36489EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/18 1:15 p.m.21 views

Sql injection

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

6.5CVSS8.9AI score0.36489EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/18 12:00 a.m.14 views

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO USA. A SQL injection vulnerability exists in versions prior to ZOHO ManageEngine OpManager 125588 and 125603, which stems from a problem in the inventory reporting module. An attacker could use this vulnerability...

8.8CVSS5.9AI score0.36489EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/12/12 12:00 a.m.48 views

Zoho Corporation ManageEngine OpManager Licensing Issue Vulnerability

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

9.8CVSS2.9AI score0.05351EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/09 8:15 p.m.5 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS7.3AI score0.05351EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/09 8:15 p.m.20 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS0.05351EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/09 8:15 p.m.7 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

9.8CVSS7.3AI score0.05351EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/09 7:15 p.m.59 views

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before build 125490 contains an authentication flaw that mishandles access to audit directories, enabling unauthenticated access to sensitive audit areas. CVSS data indicates high to critical impact (C/H, I/H, A/H) with network attack vector and no user...

9.8CVSS9.5AI score0.05351EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/09 12:00 a.m.7 views

Zoho Corporation ManageEngine OpManager 授权问题漏洞

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

9.8CVSS5.5AI score0.05351EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/10/14 12:00 a.m.11 views

Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2021-88240)

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

9.8CVSS7.6AI score0.50209EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/13 11:15 p.m.9 views

CVE-2021-40493

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...

9.8CVSS5.8AI score0.50209EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/13 11:15 p.m.7 views

CVE-2021-41075

The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...

9.8CVSS7.4AI score0.03432EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/10/13 10:12 p.m.33 views

CVE-2021-41075

The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...

10AI score0.03432EPSS
SaveExploits0References1
Rows per page
Query Builder