Zoho ManageEngine OpManger - Arbitrary File Read

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a specially crafted request. id: CVE-2020-12116 info: name: Zoho ManageEngine OpManger - Arbitrary File Read author:...

CVE-2021-41075

The CVE-2021-41075 affects Zoho ManageEngine OpManager’s NetFlow Analyzer prior to build 125455. The vulnerability is a SQL Injection in the Attacks Module API, enabling an attacker to execute arbitrary SQL commands. The issue is confirmed across multiple sources (including Red Hat and CNVD) and ...

PT-2021-23068

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManger versions prior to 125455 Description The issue concerns a SQL Injection vulnerability in the Attacks Module API of the NetFlow Analyzer. This vulnerability can be exploited to inject malicious SQL code. Recommendatio...

CVE-2021-41075: Improper Neutralization of Special Elements used in an SQL Command

The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...