CVEDB API

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.222

EPSS Ranking 95.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-41288

Zohocorp » Manageengine Opmanager » Version: N/A

cpe:2.3:a:zohocorp:manageengine_opmanager:-
Zohocorp » Manageengine Opmanager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
Zohocorp » Manageengine Opmanager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
Zohocorp » Manageengine Opmanager » Version: 12.2

cpe:2.3:a:zohocorp:manageengine_opmanager:12.2
Zohocorp » Manageengine Opmanager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_opmanager:12.3
Zohocorp » Manageengine Opmanager » Version: 12.4

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4
Zohocorp » Manageengine Opmanager » Version: 12.5

cpe:2.3:a:zohocorp:manageengine_opmanager:12.5
Zohocorp » Manageengine Opmanager » Version: 8

cpe:2.3:a:zohocorp:manageengine_opmanager:8