CVE-2022-29535

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

CVE-2022-29535

Summary: CVE-2022-29535 affects Zoho ManageEngine OPManager (version 125588 and prior). Multiple connected sources describe a SQL injection vulnerability that can be exploited via some default reports, enabling remote attackers to execute arbitrary SQL commands. The issue is confirmed across NVD,...

PT-2022-19685

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OPManager versions through 125588 Description The issue allows SQL Injection via a few default reports. Recommendations For versions through 125588, update to a version that contains a fix for this issue to prevent SQL...

ZOHO ManageEngine OpManager has a SQL injection vulnerability

ZOHO ManageEngine OpManager is a network, server, and virtualization monitoring software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine OpManager version 125588 and prior versions, which can be exploited by remote attackers to perform SQL injection via some default...

CVE-2022-29535: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports...

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

Sql injection

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

CVE-2022-27908

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

CVE-2022-27908

Zoho ManageEngine OpManager is affected by an authenticated SQL injection in the Inventory Reports module, affecting versions prior to 125588 (and prior to 125603). The vulnerability arises from unsanitized input in the Inventory Reports functionality, enabling an attacker with valid credentials ...

PT-2022-18683

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 125588 Zoho ManageEngine OpManager versions prior to 125603 Description The issue concerns an authenticated SQL Injection in the Inventory Reports module. Recommendations For versions prior to...

ZOHO ManageEngine OpManager has a SQL injection vulnerability

ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO USA. A SQL injection vulnerability exists in versions prior to ZOHO ManageEngine OpManager 125588 and 125603, which stems from a problem in the inventory reporting module. An attacker could use this vulnerability...

CVE-2022-27908: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager before 125588 and before 125603 is vulnerable to authenticated SQL Injection in the Inventory Reports module...

Zoho Corporation ManageEngine OpManager Licensing Issue Vulnerability

Zoho Corporation ManageEngine OpManager is a comprehensive network monitoring software from Zoho Corporation, USA. Zoho Corporation ManageEngine OpManager is vulnerable to an authorization issue that could be exploited by an unauthenticated attacker to access the audit directory...

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

Authentication flaw

OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories...

CVE-2021-44514

OpUtils in Zoho ManageEngine OpManager 12.5 before build 125490 contains an authentication flaw that mishandles access to audit directories, enabling unauthenticated access to sensitive audit areas. CVSS data indicates high to critical impact (C/H, I/H, A/H) with network attack vector and no user...