CVE-2021-40493

Publication date

2021-10-13 22:07:34

Family

mitre

State

PUBLISHED

Description

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.