← Database

CVE-2021-40493

CRITICAL CVSS: 9.8 Published: 2021-10-13 Modified: 2026-06-17

Description

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.

Affected Platforms

Zohocorp Manageengine Opmanager

Weakness Type

CWE-89

References