| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine opmanager | = 10.0= 10.1= 10.2= 11.0= 11.1= 11.2= 11.3= 11.4= 11.5= 8.8= 9.0= 9.1= 9.2= 9.4 |
Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1) customerName or (2) serverRole parameter in a standbyUpdateInCentral operation to servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free