CVE-2021-41081

nvd nist

Published: Nov 11, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search.

Affected (69)

Products: Zohocorp: Manageengine Network Configuration Manager

Zohocorp

1 product

Manageengine Network Configuration Manager

Configuration A

69 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Network Configuration Manager	From 12.4 to 12.5
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123123
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123129
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123137
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123151
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123156
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123159
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123169
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123177
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123179
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123191
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123194
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123206
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123207
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123214
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123215
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123217
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123218
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123222
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123223
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123231
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123237
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123239
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123274
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123277
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123279
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123288
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123304
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123306
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123312
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123323
Zohocorp Manageengine Network Configuration Manager	Version 12.3 build123327
Zohocorp Manageengine Network Configuration Manager	Version 12.5
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125000
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125108
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125112
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125115
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125116
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125120
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125121
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125125
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125129
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125136
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125142
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125149
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125180
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125195
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125199
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125212
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125213
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125216
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125228
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125232
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125233
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125234
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125323
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125325
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125327
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125329
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125343
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125345
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125358
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125362
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125363
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125378
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125392
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125399
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125417
Zohocorp Manageengine Network Configuration Manager	Version 12.5 build125445

Related CWEs

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (2)

https://www.manageengine.com/network-configuration-manager/security-updates/cve-2021-41081.html

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/network-configuration-manager/security-updates/cve-2021-41081.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.