CVE-2018-18949 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 93%

Vendor	Product	Version
zohocorp	manageengine_opmanager	11.4
zohocorp	manageengine_opmanager	11.5
zohocorp	manageengine_opmanager	12.3
zohocorp	manageengine_opmanager	12.3:build12300
zohocorp	manageengine_opmanager	12.3:build123001
zohocorp	manageengine_opmanager	12.3:build123002
zohocorp	manageengine_opmanager	12.3:build123003
zohocorp	manageengine_opmanager	12.3:build123004
zohocorp	manageengine_opmanager	12.3:build123005
zohocorp	manageengine_opmanager	12.3:build123006
zohocorp	manageengine_opmanager	12.3:build123007
zohocorp	manageengine_opmanager	12.3:build123008
zohocorp	manageengine_opmanager	12.3:build123009
zohocorp	manageengine_opmanager	12.3:build123010
zohocorp	manageengine_opmanager	12.3:build123011
zohocorp	manageengine_opmanager	12.3:build123012
zohocorp	manageengine_opmanager	12.3:build123013
zohocorp	manageengine_opmanager	12.3:build123014
zohocorp	manageengine_opmanager	12.3:build123015
zohocorp	manageengine_opmanager	12.3:build123021
zohocorp	manageengine_opmanager	12.3:build123022
zohocorp	manageengine_opmanager	12.3:build123023
zohocorp	manageengine_opmanager	12.3:build123024
zohocorp	manageengine_opmanager	12.3:build123025
zohocorp	manageengine_opmanager	12.3:build123026
zohocorp	manageengine_opmanager	12.3:build123027
zohocorp	manageengine_opmanager	12.3:build123028
zohocorp	manageengine_opmanager	12.3:build123029
zohocorp	manageengine_opmanager	12.3:build123030
zohocorp	manageengine_opmanager	12.3:build123031
zohocorp	manageengine_opmanager	12.3:build123032
zohocorp	manageengine_opmanager	12.3:build123033
zohocorp	manageengine_opmanager	12.3:build123034
zohocorp	manageengine_opmanager	12.3:build123035
zohocorp	manageengine_opmanager	12.3:build123036
zohocorp	manageengine_opmanager	12.3:build123037
zohocorp	manageengine_opmanager	12.3:build123043
zohocorp	manageengine_opmanager	12.3:build123044
zohocorp	manageengine_opmanager	12.3:build123045
zohocorp	manageengine_opmanager	12.3:build123046
zohocorp	manageengine_opmanager	12.3:build123047
zohocorp	manageengine_opmanager	12.3:build123048
zohocorp	manageengine_opmanager	12.3:build123049
zohocorp	manageengine_opmanager	12.3:build123050
zohocorp	manageengine_opmanager	12.3:build123051
zohocorp	manageengine_opmanager	12.3:build123052
zohocorp	manageengine_opmanager	12.3:build123053
zohocorp	manageengine_opmanager	12.3:build123054
zohocorp	manageengine_opmanager	12.3:build123055
zohocorp	manageengine_opmanager	12.3:build123056
zohocorp	manageengine_opmanager	12.3:build123057
zohocorp	manageengine_opmanager	12.3:build123062
zohocorp	manageengine_opmanager	12.3:build123063
zohocorp	manageengine_opmanager	12.3:build123064
zohocorp	manageengine_opmanager	12.3:build123065
zohocorp	manageengine_opmanager	12.3:build123066
zohocorp	manageengine_opmanager	12.3:build123067
zohocorp	manageengine_opmanager	12.3:build123068
zohocorp	manageengine_opmanager	12.3:build123069
zohocorp	manageengine_opmanager	12.3:build123070
zohocorp	manageengine_opmanager	12.3:build123076
zohocorp	manageengine_opmanager	12.3:build123077
zohocorp	manageengine_opmanager	12.3:build123078
zohocorp	manageengine_opmanager	12.3:build123079
zohocorp	manageengine_opmanager	12.3:build123080
zohocorp	manageengine_opmanager	12.3:build123081
zohocorp	manageengine_opmanager	12.3:build123082
zohocorp	manageengine_opmanager	12.3:build123083
zohocorp	manageengine_opmanager	12.3:build123084
zohocorp	manageengine_opmanager	12.3:build123086
zohocorp	manageengine_opmanager	12.3:build123090
zohocorp	manageengine_opmanager	12.3:build123091
zohocorp	manageengine_opmanager	12.3:build123092
zohocorp	manageengine_opmanager	12.3:build123093
zohocorp	manageengine_opmanager	12.3:build123104
zohocorp	manageengine_opmanager	12.3:build123105
zohocorp	manageengine_opmanager	12.3:build123106
zohocorp	manageengine_opmanager	12.3:build123107
zohocorp	manageengine_opmanager	12.3:build123108
zohocorp	manageengine_opmanager	12.3:build123109
zohocorp	manageengine_opmanager	12.3:build123110
zohocorp	manageengine_opmanager	12.3:build123111
zohocorp	manageengine_opmanager	12.3:build123112
zohocorp	manageengine_opmanager	12.3:build123113
zohocorp	manageengine_opmanager	12.3:build123114
zohocorp	manageengine_opmanager	12.3:build123115
zohocorp	manageengine_opmanager	12.3:build123116
zohocorp	manageengine_opmanager	12.3:build123117
zohocorp	manageengine_opmanager	12.3:build123118
zohocorp	manageengine_opmanager	12.3:build123119
zohocorp	manageengine_opmanager	12.3:build123120
zohocorp	manageengine_opmanager	12.3:build123121
zohocorp	manageengine_opmanager	12.3:build123122
zohocorp	manageengine_opmanager	12.3:build123123
zohocorp	manageengine_opmanager	12.3:build123124
zohocorp	manageengine_opmanager	12.3:build123125
zohocorp	manageengine_opmanager	12.3:build123126
zohocorp	manageengine_opmanager	12.3:build123127
zohocorp	manageengine_opmanager	12.3:build123136
zohocorp	manageengine_opmanager	12.3:build123137
zohocorp	manageengine_opmanager	12.3:build123147
zohocorp	manageengine_opmanager	12.3:build123148
zohocorp	manageengine_opmanager	12.3:build123149
zohocorp	manageengine_opmanager	12.3:build123150
zohocorp	manageengine_opmanager	12.3:build123156
zohocorp	manageengine_opmanager	12.3:build123157
zohocorp	manageengine_opmanager	12.3:build123158
zohocorp	manageengine_opmanager	12.3:build123159
zohocorp	manageengine_opmanager	12.3:build123160
zohocorp	manageengine_opmanager	12.3:build123161
zohocorp	manageengine_opmanager	12.3:build123162
zohocorp	manageengine_opmanager	12.3:build123163
zohocorp	manageengine_opmanager	12.3:build123164
zohocorp	manageengine_opmanager	12.3:build123165
zohocorp	manageengine_opmanager	12.3:build123166
zohocorp	manageengine_opmanager	12.3:build123167
zohocorp	manageengine_opmanager	12.3:build123168
zohocorp	manageengine_opmanager	12.3:build123169
zohocorp	manageengine_opmanager	12.3:build123175
zohocorp	manageengine_opmanager	12.3:build123176
zohocorp	manageengine_opmanager	12.3:build123177
zohocorp	manageengine_opmanager	12.3:build123178
zohocorp	manageengine_opmanager	12.3:build123179
zohocorp	manageengine_opmanager	12.3:build123180
zohocorp	manageengine_opmanager	12.3:build123181
zohocorp	manageengine_opmanager	12.3:build123182
zohocorp	manageengine_opmanager	12.3:build123183
zohocorp	manageengine_opmanager	12.3:build123184
zohocorp	manageengine_opmanager	12.3:build123185
zohocorp	manageengine_opmanager	12.3:build123186
zohocorp	manageengine_opmanager	12.3:build123187
zohocorp	manageengine_opmanager	12.3:build123188
zohocorp	manageengine_opmanager	12.3:build123189
zohocorp	manageengine_opmanager	12.3:build123190
zohocorp	manageengine_opmanager	12.3:build123191
zohocorp	manageengine_opmanager	12.3:build123192
zohocorp	manageengine_opmanager	12.3:build123193
zohocorp	manageengine_opmanager	12.3:build123194
zohocorp	manageengine_opmanager	12.3:build123195
zohocorp	manageengine_opmanager	12.3:build123196
zohocorp	manageengine_opmanager	12.3:build123197
zohocorp	manageengine_opmanager	12.3:build123198
zohocorp	manageengine_opmanager	12.3:build123204
zohocorp	manageengine_opmanager	12.3:build123205
zohocorp	manageengine_opmanager	12.3:build123206
zohocorp	manageengine_opmanager	12.3:build123207
zohocorp	manageengine_opmanager	12.3:build123208
zohocorp	manageengine_opmanager	12.3:build123214
zohocorp	manageengine_opmanager	12.3:build123215
zohocorp	manageengine_opmanager	12.3:build123217
zohocorp	manageengine_opmanager	12.3:build123218
zohocorp	manageengine_opmanager	12.3:build123219
zohocorp	manageengine_opmanager	12.3:build123220
zohocorp	manageengine_opmanager	12.3:build123221

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

References

https://www.manageengine.com/network-monitoring/help/read-me.html