Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2021-41075 Details
Description
The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125455 | CVE | Release NotesVendor Advisory |
| https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125455 | [email protected] | Release NotesVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| zohocorp manageengine opmanager | < 12.5 12.5 - 12.5 build125000 12.5 build125002 12.5 build125100 12.5 build125101 12.5 build125102 12.5 build125108 12.5 build125110 12.5 build125111 12.5 build125112 12.5 build125113 12.5 build125114 12.5 build125116 12.5 build125117 12.5 build125118 12.5 build125120 12.5 build125121 12.5 build125123 12.5 build125124 12.5 build125125 12.5 build125136 12.5 build125137 12.5 build125139 12.5 build125140 12.5 build125143 12.5 build125144 12.5 build125145 12.5 build125156 12.5 build125157 12.5 build125158 12.5 build125159 12.5 build125161 12.5 build125163 12.5 build125174 12.5 build125175 12.5 build125176 12.5 build125177 12.5 build125178 12.5 build125180 12.5 build125181 12.5 build125192 12.5 build125193 12.5 build125194 12.5 build125195 12.5 build125196 12.5 build125197 12.5 build125198 12.5 build125201 12.5 build125204 12.5 build125212 12.5 build125213 12.5 build125214 12.5 build125215 12.5 build125216 12.5 build125228 12.5 build125229 12.5 build125230 12.5 build125231 12.5 build125232 12.5 build125233 12.5 build125312 12.5 build125323 12.5 build125324 12.5 build125326 12.5 build125328 12.5 build125329 12.5 build125340 12.5 build125341 12.5 build125342 12.5 build125343 12.5 build125344 12.5 build125346 12.5 build125358 12.5 build125359 12.5 build125360 12.5 build125361 12.5 build125362 12.5 build125364 12.5 build125366 12.5 build125367 12.5 build125375 12.5 build125376 12.5 build125377 12.5 build125378 12.5 build125379 12.5 build125380 12.5 build125381 12.5 build125382 12.5 build125386 12.5 build125392 12.5 build125393 12.5 build125394 12.5 build125397 12.5 build125398 12.5 build125399 12.5 build125405 12.5 build125410 12.5 build125411 12.5 build125413 12.5 build125414 12.5 build125415 12.5 build125416 12.5 build125417 12.5 build125420 12.5 build125428 12.5 build125430 12.5 build125431 12.5 build125432 12.5 build125433 12.5 build125434 12.5 build125437 12.5 build125446 12.5 build125448 12.5 build125450 12.5 build125451 12.5 build125452 12.5 build125453 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 19, 2021 | Initial Analysis | [email protected] |