9.8

CVE-2021-41080

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123123
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123129
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123137
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123151
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123156
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123159
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123169
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123177
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123179
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123191
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123194
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123206
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123207
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123214
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123215
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123217
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123218
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123222
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123223
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123231
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123237
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123239
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123274
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123277
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123279
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123288
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123304
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123306
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123312
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123323
Zohocorp ≫ Manageengine Network Configuration Manager Version12.3 Updatebuild123327
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125000
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125108
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125112
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125115
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125116
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125120
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125121
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125125
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125129
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125136
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125142
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125149
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125180
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125195
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125199
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125212
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125213
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125216
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125228
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125232
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125233
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125234
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125323
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125325
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125327
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125329
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125343
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125345
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125358
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125362
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125363
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125378
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125392
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125399
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125417
Zohocorp ≫ Manageengine Network Configuration Manager Version12.5 Updatebuild125445
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.82% 0.957
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.