Description
An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack.
Unscored
CVE-2017-11559
EUVD-2017-3174GHSA-3gw2-vfgh-v3jw
An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/js…
Published May 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre