9.8

CVE-2018-20173

Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build12300
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123001
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123002
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123003
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123004
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123005
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123006
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123007
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123008
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123009
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123010
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123011
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123012
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123013
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123014
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123015
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123021
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123022
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123023
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123024
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123025
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123026
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123027
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123028
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123029
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123030
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123031
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123032
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123033
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123034
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123035
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123036
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123037
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123043
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123044
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123045
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123046
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123047
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123048
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123049
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123050
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123051
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123052
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123053
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123054
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123055
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123056
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123057
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123062
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123063
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123064
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123065
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123066
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123067
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123068
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123069
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123070
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123076
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123077
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123078
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123079
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123080
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123081
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123082
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123083
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123084
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123086
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123090
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123091
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123092
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123192
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123193
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123194
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123195
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123196
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123197
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123198
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123204
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123205
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123206
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123207
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123208
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123222
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123223
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123224
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123229
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123230
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123231
Zohocorp ≫ Manageengine Opmanager Version 12.3 Update build123237
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 24.5% 0.976
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

https://www.manageengine.com/network-monitoring/help/read-me.html
Vendor Advisory
Release Notes