CVE-2014-7864

Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and…

published February 4, 2015

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1) customerName or (2) serverRole parameter in a standbyUpdateInCentral operation to servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22667 · 97.7th percentile
Published
2015-02-04T16:00Z
EPSS history
Timeline
  • 04 FEB 16:00Z
    Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and…
    cvelistv5