Security Advisory

CVE-2017-11559

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-23 17:09:19
Last updated 2024-08-05 18:12:40
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack.