CVE-2021-41080
Severity
9.8CRITICAL
EPSS
15.5%
top 5.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 11
Latest updateMay 24
Description
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages1 packages
🔴Vulnerability Details
2GHSA▶
GHSA-q4qc-8596-mc5f: Zoho ManageEngine Network Configuration Manager before ??125465 is vulnerable to SQL Injection in a hardware details search↗2022-05-24
CVEList▶
CVE-2021-41080: Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search↗2021-11-11