CVE-2021-40493

—

CVSS 3.1

9.8 critical

EPSS

50%p99

Published

Oct 13, 2021 (Oct 13, 2021)

Modified

Jun 17, 2026

Description

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.

Vendors: zohocorp
Products: manageengine opmanager
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (50.2%)

In the news0 stories

No ingested article mentions this CVE yet.