Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.
                
            References
                    | Link | Resource | 
|---|---|
| https://www.manageengine.com/network-monitoring/security-updates/cve-2021-40493.html | Vendor Advisory | 
| https://www.manageengine.com/network-monitoring/security-updates/cve-2021-40493.html | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 06:24
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://www.manageengine.com/network-monitoring/security-updates/cve-2021-40493.html - Vendor Advisory | 
Information
                Published : 2021-10-13 23:15
Updated : 2024-11-21 06:24
NVD link : CVE-2021-40493
Mitre link : CVE-2021-40493
CVE.ORG link : CVE-2021-40493
JSON object : View
Products Affected
                zohocorp
- manageengine_opmanager
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
