CVE-2021-41288

nvd nist

Published: Sep 30, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.

Affected (120)

Products: Zohocorp: Manageengine Opmanager

Zohocorp

1 product

Manageengine Opmanager

Configuration A

120 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Opmanager	Up to 12.4
Zohocorp Manageengine Opmanager	Version 12.5
Zohocorp Manageengine Opmanager	Version 12.5 build125000
Zohocorp Manageengine Opmanager	Version 12.5 build125002
Zohocorp Manageengine Opmanager	Version 12.5 build125100
Zohocorp Manageengine Opmanager	Version 12.5 build125101
Zohocorp Manageengine Opmanager	Version 12.5 build125102
Zohocorp Manageengine Opmanager	Version 12.5 build125108
Zohocorp Manageengine Opmanager	Version 12.5 build125110
Zohocorp Manageengine Opmanager	Version 12.5 build125111
Zohocorp Manageengine Opmanager	Version 12.5 build125112
Zohocorp Manageengine Opmanager	Version 12.5 build125113
Zohocorp Manageengine Opmanager	Version 12.5 build125114
Zohocorp Manageengine Opmanager	Version 12.5 build125116
Zohocorp Manageengine Opmanager	Version 12.5 build125117
Zohocorp Manageengine Opmanager	Version 12.5 build125118
Zohocorp Manageengine Opmanager	Version 12.5 build125120
Zohocorp Manageengine Opmanager	Version 12.5 build125121
Zohocorp Manageengine Opmanager	Version 12.5 build125123
Zohocorp Manageengine Opmanager	Version 12.5 build125124
Zohocorp Manageengine Opmanager	Version 12.5 build125125
Zohocorp Manageengine Opmanager	Version 12.5 build125136
Zohocorp Manageengine Opmanager	Version 12.5 build125137
Zohocorp Manageengine Opmanager	Version 12.5 build125139
Zohocorp Manageengine Opmanager	Version 12.5 build125140
Zohocorp Manageengine Opmanager	Version 12.5 build125143
Zohocorp Manageengine Opmanager	Version 12.5 build125144
Zohocorp Manageengine Opmanager	Version 12.5 build125145
Zohocorp Manageengine Opmanager	Version 12.5 build125156
Zohocorp Manageengine Opmanager	Version 12.5 build125157
Zohocorp Manageengine Opmanager	Version 12.5 build125158
Zohocorp Manageengine Opmanager	Version 12.5 build125159
Zohocorp Manageengine Opmanager	Version 12.5 build125161
Zohocorp Manageengine Opmanager	Version 12.5 build125163
Zohocorp Manageengine Opmanager	Version 12.5 build125174
Zohocorp Manageengine Opmanager	Version 12.5 build125175
Zohocorp Manageengine Opmanager	Version 12.5 build125176
Zohocorp Manageengine Opmanager	Version 12.5 build125177
Zohocorp Manageengine Opmanager	Version 12.5 build125178
Zohocorp Manageengine Opmanager	Version 12.5 build125180
Zohocorp Manageengine Opmanager	Version 12.5 build125181
Zohocorp Manageengine Opmanager	Version 12.5 build125192
Zohocorp Manageengine Opmanager	Version 12.5 build125193
Zohocorp Manageengine Opmanager	Version 12.5 build125194
Zohocorp Manageengine Opmanager	Version 12.5 build125195
Zohocorp Manageengine Opmanager	Version 12.5 build125196
Zohocorp Manageengine Opmanager	Version 12.5 build125197
Zohocorp Manageengine Opmanager	Version 12.5 build125198
Zohocorp Manageengine Opmanager	Version 12.5 build125201
Zohocorp Manageengine Opmanager	Version 12.5 build125204
Zohocorp Manageengine Opmanager	Version 12.5 build125212
Zohocorp Manageengine Opmanager	Version 12.5 build125213
Zohocorp Manageengine Opmanager	Version 12.5 build125214
Zohocorp Manageengine Opmanager	Version 12.5 build125215
Zohocorp Manageengine Opmanager	Version 12.5 build125216
Zohocorp Manageengine Opmanager	Version 12.5 build125228
Zohocorp Manageengine Opmanager	Version 12.5 build125229
Zohocorp Manageengine Opmanager	Version 12.5 build125230
Zohocorp Manageengine Opmanager	Version 12.5 build125231
Zohocorp Manageengine Opmanager	Version 12.5 build125232
Zohocorp Manageengine Opmanager	Version 12.5 build125233
Zohocorp Manageengine Opmanager	Version 12.5 build125312
Zohocorp Manageengine Opmanager	Version 12.5 build125323
Zohocorp Manageengine Opmanager	Version 12.5 build125324
Zohocorp Manageengine Opmanager	Version 12.5 build125326
Zohocorp Manageengine Opmanager	Version 12.5 build125328
Zohocorp Manageengine Opmanager	Version 12.5 build125329
Zohocorp Manageengine Opmanager	Version 12.5 build125340
Zohocorp Manageengine Opmanager	Version 12.5 build125341
Zohocorp Manageengine Opmanager	Version 12.5 build125342
Zohocorp Manageengine Opmanager	Version 12.5 build125343
Zohocorp Manageengine Opmanager	Version 12.5 build125344
Zohocorp Manageengine Opmanager	Version 12.5 build125346
Zohocorp Manageengine Opmanager	Version 12.5 build125358
Zohocorp Manageengine Opmanager	Version 12.5 build125359
Zohocorp Manageengine Opmanager	Version 12.5 build125360
Zohocorp Manageengine Opmanager	Version 12.5 build125361
Zohocorp Manageengine Opmanager	Version 12.5 build125362
Zohocorp Manageengine Opmanager	Version 12.5 build125364
Zohocorp Manageengine Opmanager	Version 12.5 build125366
Zohocorp Manageengine Opmanager	Version 12.5 build125367
Zohocorp Manageengine Opmanager	Version 12.5 build125375
Zohocorp Manageengine Opmanager	Version 12.5 build125376
Zohocorp Manageengine Opmanager	Version 12.5 build125377
Zohocorp Manageengine Opmanager	Version 12.5 build125378
Zohocorp Manageengine Opmanager	Version 12.5 build125379
Zohocorp Manageengine Opmanager	Version 12.5 build125380
Zohocorp Manageengine Opmanager	Version 12.5 build125381
Zohocorp Manageengine Opmanager	Version 12.5 build125382
Zohocorp Manageengine Opmanager	Version 12.5 build125386
Zohocorp Manageengine Opmanager	Version 12.5 build125392
Zohocorp Manageengine Opmanager	Version 12.5 build125393
Zohocorp Manageengine Opmanager	Version 12.5 build125394
Zohocorp Manageengine Opmanager	Version 12.5 build125397
Zohocorp Manageengine Opmanager	Version 12.5 build125398
Zohocorp Manageengine Opmanager	Version 12.5 build125399
Zohocorp Manageengine Opmanager	Version 12.5 build125405
Zohocorp Manageengine Opmanager	Version 12.5 build125410
Zohocorp Manageengine Opmanager	Version 12.5 build125411
Zohocorp Manageengine Opmanager	Version 12.5 build125413
Zohocorp Manageengine Opmanager	Version 12.5 build125414
Zohocorp Manageengine Opmanager	Version 12.5 build125415
Zohocorp Manageengine Opmanager	Version 12.5 build125416
Zohocorp Manageengine Opmanager	Version 12.5 build125417
Zohocorp Manageengine Opmanager	Version 12.5 build125420
Zohocorp Manageengine Opmanager	Version 12.5 build125428
Zohocorp Manageengine Opmanager	Version 12.5 build125430
Zohocorp Manageengine Opmanager	Version 12.5 build125431
Zohocorp Manageengine Opmanager	Version 12.5 build125432
Zohocorp Manageengine Opmanager	Version 12.5 build125433
Zohocorp Manageengine Opmanager	Version 12.5 build125434
Zohocorp Manageengine Opmanager	Version 12.5 build125437
Zohocorp Manageengine Opmanager	Version 12.5 build125446
Zohocorp Manageengine Opmanager	Version 12.5 build125448
Zohocorp Manageengine Opmanager	Version 12.5 build125450
Zohocorp Manageengine Opmanager	Version 12.5 build125451
Zohocorp Manageengine Opmanager	Version 12.5 build125452
Zohocorp Manageengine Opmanager	Version 12.5 build125453
Zohocorp Manageengine Opmanager	Version 12.5 build125455
Zohocorp Manageengine Opmanager	Version 12.5 build125466

Related CWEs

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (2)

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125467

Source: cve@mitre.org

Release NotesVendor Advisory

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125467

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.