ManageEngine OpManager APMIntegBusinessViewHandler OPM_BVNAME SQL Injection

This vulnerability is due to insufficient validation of the OPMBVNAME parameter when processing requests sent to APMIntegBusinessViewHandler servlet. A remote, unauthenticated attacker could exploit this vulnerability by sending a web request with a malicious SQL query to the target server...