Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-41080: Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
CVE-2021-41080 · published 4 years ago
Summary
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
What to do
- Update zohocorp manageengine_network_configuration_manager to version 12.5 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| zohocorp | manageengine_network_configuration_manager |
>= 12.4, < 12.5 12.3 12.5 cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:*:*:*:*:*:*:*:* |
Original advisory text
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-89SQL Injection
Timeline
Published11 Nov 2021
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2021-41080 · NVD
Track software like this
Free during beta