CVE-2021-40493

9.8 criticalEPSS 50%

Critical (9.8) in zohocorp manageengine opmanager. EPSS 50% chance of exploitation in the next 30 days.

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 50% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-10-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_opmanager

References

https://www.manageengine.com/network-monitoring/security-updates/cve-2021-40493.html
https://www.manageengine.com/network-monitoring/security-updates/cve-2021-40493.html

Check your stack JSON