CVE-2022-27908 in ManageEngine OpManager

Sumário

de MITRE • 18/04/2022

Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 25/03/2022
• Divulgação: 18/04/2022
• Moderação: aceite
• Entrada: VDB-197569
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.37719
• KEV: não
• Atividades: muito baixo
• Sector: Energy, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-27908
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-27908
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-27908/