CVEDB API

Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.042

EPSS Ranking 88.2%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2022-27908

Zohocorp » Manageengine Opmanager » Version: N/A

cpe:2.3:a:zohocorp:manageengine_opmanager:-
Zohocorp » Manageengine Opmanager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
Zohocorp » Manageengine Opmanager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
Zohocorp » Manageengine Opmanager » Version: 12.2

cpe:2.3:a:zohocorp:manageengine_opmanager:12.2
Zohocorp » Manageengine Opmanager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_opmanager:12.3
Zohocorp » Manageengine Opmanager » Version: 12.4

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4
Zohocorp » Manageengine Opmanager » Version: 12.4.179

cpe:2.3:a:zohocorp:manageengine_opmanager:12.4.179
Zohocorp » Manageengine Opmanager » Version: 12.5

cpe:2.3:a:zohocorp:manageengine_opmanager:12.5
Zohocorp » Manageengine Opmanager » Version: 8

cpe:2.3:a:zohocorp:manageengine_opmanager:8