Security Advisory

CVE-2017-11559

7.5
HIGH

Vulnerability Description

An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL Injection attack.
Published Date May 23, 2019
Official Source NIST NVD Advisory