CVE-2017-11559

An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-05-23

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Manageengine Opmanager (Zohocorp)

References

• http://manageengine.com
• http://opmanager.com
• https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736