CVE-2021-40493

Published Oct 13, 2021 CVSS 3.1 · 9.8 Critical EPSS 50.2% KEV · Not listed
Description
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 4, 2024, 2:44 AM
Reserved
Sep 3, 2021, 12:00 AM
Status
Modified
Published
Oct 13, 2021, 11:15 PM
Modified
Jun 17, 2026, 4:07 AM