CVE-2018-20173 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 93%

Vendor	Product	Version
zohocorp	manageengine_opmanager	12.3:build12300
zohocorp	manageengine_opmanager	12.3:build123001
zohocorp	manageengine_opmanager	12.3:build123002
zohocorp	manageengine_opmanager	12.3:build123003
zohocorp	manageengine_opmanager	12.3:build123004
zohocorp	manageengine_opmanager	12.3:build123005
zohocorp	manageengine_opmanager	12.3:build123006
zohocorp	manageengine_opmanager	12.3:build123007
zohocorp	manageengine_opmanager	12.3:build123008
zohocorp	manageengine_opmanager	12.3:build123009
zohocorp	manageengine_opmanager	12.3:build123010
zohocorp	manageengine_opmanager	12.3:build123011
zohocorp	manageengine_opmanager	12.3:build123012
zohocorp	manageengine_opmanager	12.3:build123013
zohocorp	manageengine_opmanager	12.3:build123014
zohocorp	manageengine_opmanager	12.3:build123015
zohocorp	manageengine_opmanager	12.3:build123021
zohocorp	manageengine_opmanager	12.3:build123022
zohocorp	manageengine_opmanager	12.3:build123023
zohocorp	manageengine_opmanager	12.3:build123024
zohocorp	manageengine_opmanager	12.3:build123025
zohocorp	manageengine_opmanager	12.3:build123026
zohocorp	manageengine_opmanager	12.3:build123027
zohocorp	manageengine_opmanager	12.3:build123028
zohocorp	manageengine_opmanager	12.3:build123029
zohocorp	manageengine_opmanager	12.3:build123030
zohocorp	manageengine_opmanager	12.3:build123031
zohocorp	manageengine_opmanager	12.3:build123032
zohocorp	manageengine_opmanager	12.3:build123033
zohocorp	manageengine_opmanager	12.3:build123034
zohocorp	manageengine_opmanager	12.3:build123035
zohocorp	manageengine_opmanager	12.3:build123036
zohocorp	manageengine_opmanager	12.3:build123037
zohocorp	manageengine_opmanager	12.3:build123043
zohocorp	manageengine_opmanager	12.3:build123044
zohocorp	manageengine_opmanager	12.3:build123045
zohocorp	manageengine_opmanager	12.3:build123046
zohocorp	manageengine_opmanager	12.3:build123047
zohocorp	manageengine_opmanager	12.3:build123048
zohocorp	manageengine_opmanager	12.3:build123049
zohocorp	manageengine_opmanager	12.3:build123050
zohocorp	manageengine_opmanager	12.3:build123051
zohocorp	manageengine_opmanager	12.3:build123052
zohocorp	manageengine_opmanager	12.3:build123053
zohocorp	manageengine_opmanager	12.3:build123054
zohocorp	manageengine_opmanager	12.3:build123055
zohocorp	manageengine_opmanager	12.3:build123056
zohocorp	manageengine_opmanager	12.3:build123057
zohocorp	manageengine_opmanager	12.3:build123062
zohocorp	manageengine_opmanager	12.3:build123063
zohocorp	manageengine_opmanager	12.3:build123064
zohocorp	manageengine_opmanager	12.3:build123065
zohocorp	manageengine_opmanager	12.3:build123066
zohocorp	manageengine_opmanager	12.3:build123067
zohocorp	manageengine_opmanager	12.3:build123068
zohocorp	manageengine_opmanager	12.3:build123069
zohocorp	manageengine_opmanager	12.3:build123070
zohocorp	manageengine_opmanager	12.3:build123076
zohocorp	manageengine_opmanager	12.3:build123077
zohocorp	manageengine_opmanager	12.3:build123078
zohocorp	manageengine_opmanager	12.3:build123079
zohocorp	manageengine_opmanager	12.3:build123080
zohocorp	manageengine_opmanager	12.3:build123081
zohocorp	manageengine_opmanager	12.3:build123082
zohocorp	manageengine_opmanager	12.3:build123083
zohocorp	manageengine_opmanager	12.3:build123084
zohocorp	manageengine_opmanager	12.3:build123086
zohocorp	manageengine_opmanager	12.3:build123090
zohocorp	manageengine_opmanager	12.3:build123091
zohocorp	manageengine_opmanager	12.3:build123092
zohocorp	manageengine_opmanager	12.3:build123192
zohocorp	manageengine_opmanager	12.3:build123193
zohocorp	manageengine_opmanager	12.3:build123194
zohocorp	manageengine_opmanager	12.3:build123195
zohocorp	manageengine_opmanager	12.3:build123196
zohocorp	manageengine_opmanager	12.3:build123197
zohocorp	manageengine_opmanager	12.3:build123198
zohocorp	manageengine_opmanager	12.3:build123204
zohocorp	manageengine_opmanager	12.3:build123205
zohocorp	manageengine_opmanager	12.3:build123206
zohocorp	manageengine_opmanager	12.3:build123207
zohocorp	manageengine_opmanager	12.3:build123208
zohocorp	manageengine_opmanager	12.3:build123222
zohocorp	manageengine_opmanager	12.3:build123223
zohocorp	manageengine_opmanager	12.3:build123224
zohocorp	manageengine_opmanager	12.3:build123229
zohocorp	manageengine_opmanager	12.3:build123230
zohocorp	manageengine_opmanager	12.3:build123231
zohocorp	manageengine_opmanager	12.3:build123237

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

References

https://www.manageengine.com/network-monitoring/help/read-me.html