CVE-2021-41081 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 96%

Vendor	Product	Version
zohocorp	manageengine_network_configuration_manager	12.4 ≤ 𝑥 < 12.5
zohocorp	manageengine_network_configuration_manager	12.3:build123123
zohocorp	manageengine_network_configuration_manager	12.3:build123129
zohocorp	manageengine_network_configuration_manager	12.3:build123137
zohocorp	manageengine_network_configuration_manager	12.3:build123151
zohocorp	manageengine_network_configuration_manager	12.3:build123156
zohocorp	manageengine_network_configuration_manager	12.3:build123159
zohocorp	manageengine_network_configuration_manager	12.3:build123169
zohocorp	manageengine_network_configuration_manager	12.3:build123177
zohocorp	manageengine_network_configuration_manager	12.3:build123179
zohocorp	manageengine_network_configuration_manager	12.3:build123191
zohocorp	manageengine_network_configuration_manager	12.3:build123194
zohocorp	manageengine_network_configuration_manager	12.3:build123206
zohocorp	manageengine_network_configuration_manager	12.3:build123207
zohocorp	manageengine_network_configuration_manager	12.3:build123214
zohocorp	manageengine_network_configuration_manager	12.3:build123215
zohocorp	manageengine_network_configuration_manager	12.3:build123217
zohocorp	manageengine_network_configuration_manager	12.3:build123218
zohocorp	manageengine_network_configuration_manager	12.3:build123222
zohocorp	manageengine_network_configuration_manager	12.3:build123223
zohocorp	manageengine_network_configuration_manager	12.3:build123231
zohocorp	manageengine_network_configuration_manager	12.3:build123237
zohocorp	manageengine_network_configuration_manager	12.3:build123239
zohocorp	manageengine_network_configuration_manager	12.3:build123274
zohocorp	manageengine_network_configuration_manager	12.3:build123277
zohocorp	manageengine_network_configuration_manager	12.3:build123279
zohocorp	manageengine_network_configuration_manager	12.3:build123288
zohocorp	manageengine_network_configuration_manager	12.3:build123304
zohocorp	manageengine_network_configuration_manager	12.3:build123306
zohocorp	manageengine_network_configuration_manager	12.3:build123312
zohocorp	manageengine_network_configuration_manager	12.3:build123323
zohocorp	manageengine_network_configuration_manager	12.3:build123327
zohocorp	manageengine_network_configuration_manager	12.5
zohocorp	manageengine_network_configuration_manager	12.5:build125000
zohocorp	manageengine_network_configuration_manager	12.5:build125108
zohocorp	manageengine_network_configuration_manager	12.5:build125112
zohocorp	manageengine_network_configuration_manager	12.5:build125115
zohocorp	manageengine_network_configuration_manager	12.5:build125116
zohocorp	manageengine_network_configuration_manager	12.5:build125120
zohocorp	manageengine_network_configuration_manager	12.5:build125121
zohocorp	manageengine_network_configuration_manager	12.5:build125125
zohocorp	manageengine_network_configuration_manager	12.5:build125129
zohocorp	manageengine_network_configuration_manager	12.5:build125136
zohocorp	manageengine_network_configuration_manager	12.5:build125142
zohocorp	manageengine_network_configuration_manager	12.5:build125149
zohocorp	manageengine_network_configuration_manager	12.5:build125180
zohocorp	manageengine_network_configuration_manager	12.5:build125195
zohocorp	manageengine_network_configuration_manager	12.5:build125199
zohocorp	manageengine_network_configuration_manager	12.5:build125212
zohocorp	manageengine_network_configuration_manager	12.5:build125213
zohocorp	manageengine_network_configuration_manager	12.5:build125216
zohocorp	manageengine_network_configuration_manager	12.5:build125228
zohocorp	manageengine_network_configuration_manager	12.5:build125232
zohocorp	manageengine_network_configuration_manager	12.5:build125233
zohocorp	manageengine_network_configuration_manager	12.5:build125234
zohocorp	manageengine_network_configuration_manager	12.5:build125323
zohocorp	manageengine_network_configuration_manager	12.5:build125325
zohocorp	manageengine_network_configuration_manager	12.5:build125327
zohocorp	manageengine_network_configuration_manager	12.5:build125329
zohocorp	manageengine_network_configuration_manager	12.5:build125343
zohocorp	manageengine_network_configuration_manager	12.5:build125345
zohocorp	manageengine_network_configuration_manager	12.5:build125358
zohocorp	manageengine_network_configuration_manager	12.5:build125362
zohocorp	manageengine_network_configuration_manager	12.5:build125363
zohocorp	manageengine_network_configuration_manager	12.5:build125378
zohocorp	manageengine_network_configuration_manager	12.5:build125392
zohocorp	manageengine_network_configuration_manager	12.5:build125399
zohocorp	manageengine_network_configuration_manager	12.5:build125417
zohocorp	manageengine_network_configuration_manager	12.5:build125445

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

References

https://www.manageengine.com/network-configuration-manager/security-updates/cve-2021-41081.html