An issue was discovered in ZOHO ManageEngine OpManager 12.2
published May 23, 2019
CVSS
—
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is
An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04450 · 91.4th percentile
Published
2019-05-23T17:09Z
EPSS history
Timeline
23 MAY 17:09Z
An issue was discovered in ZOHO ManageEngine OpManager 12.2