CVE-2018-20173

{"id": "CVE-2018-20173", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2018-12-17T08:29:01.213", "references": [{"url": "https://www.manageengine.com/network-monitoring/help/read-me.html", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API."}, {"lang": "es", "value": "Zoho ManageEngine OpManager en versiones 12.3 anteriores a la 123238 permite una inyecci\u00f3n SQL mediante la API getGraphData."}], "lastModified": "2021-05-04T15:07:42.947", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build12300:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B8C57C8-97BD-4AD9-BC6D-EB76620F965E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86EB5F5D-FA8C-4B65-93D3-3B05579C3E32"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "686CBBE4-045A-4114-98BA-CE397D103DA1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ED75046-7450-4AEF-BCF8-0643FE9DD02C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AC5C2AC-B31B-4759-8279-9E2846C09AD3"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D3150D9-2411-47A3-912E-2A7B81012E7A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123006:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF11B001-835D-4F2A-9CE4-AAD28F830038"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123007:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "563BCC3B-5CC5-437F-91F1-A4AB7063489E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123008:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6400A3F5-333F-4209-A4C7-C57E2A69B455"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123009:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FEB2E01-6815-4D38-8120-DEC41C778A83"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123010:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C34E591-6A6F-4363-A2CF-A5C22E97F475"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123011:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48C8197C-0662-427F-80EB-1D43E13A8188"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123012:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9774BC15-7D33-4E73-91A6-FBE6D836AEE1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123013:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65125E3F-65D7-4178-8256-1DFA4F7EE8A7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123014:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47DF37DF-1A58-445F-91FF-5F42DA8144AC"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123015:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FE05E0C-2A98-4F1F-AFB9-08DD10394403"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123021:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88EFA32A-390D-481C-B261-3445F1937018"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123022:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5709B4B-2C63-45C5-ABAD-EB320C20A85F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123023:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "068147C0-404F-4573-964C-7BBB1ADA6202"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123024:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E9630D5-5759-416A-A460-8166134C8C74"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123025:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A1A9B60-D6A3-41C7-9487-5A46043EE012"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123026:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B697D006-8945-4CF7-B571-92A212684CD6"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123027:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F028F31A-9273-43D8-8495-9D429394426D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123028:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "117334A2-6518-4703-8C73-5B6A9D08D8FA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123029:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31C006D0-3B9B-4BE6-8A9F-5EAD2E689373"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123030:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "933E68D4-6C02-4582-AC5F-812A578FFD1C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123031:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAC430B6-52E2-4912-B1FD-9C7FB5D78BDB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123032:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75DE01FC-38A4-4C86-88C0-573686AD5989"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123033:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7157CF3A-F41F-4019-A22A-EF11EFE1BEE7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123034:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32BADD0E-8892-4BC2-B00C-8CBE9A71CACB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123035:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "737F0FA9-B08D-4CBA-A4A9-F5694DF94A40"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123036:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7235E285-FD10-47BD-A813-0E99545A475A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123037:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2674AF0C-1933-4A67-81B6-33367BA2B47A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123043:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3496F4B-11F9-46C0-B3D0-EF72781F82E7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123044:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53B6CDCF-6DB1-417D-AF2A-41FB4C9FA038"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123045:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "884B89C3-F8A0-41BA-A485-2C4B9B26B5F7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123046:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "465178DC-8C4A-4E77-9837-D50892CD817F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123047:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF26A72D-C2DA-4FCE-8FE1-6C60CF5B9B4A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123048:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B74591DE-ABC2-49DF-9761-0E3EC88CACF7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123049:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCFD5A1C-6B9F-4C9E-9183-D891A4955A8D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123050:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6391BA4-7D59-489A-8B4E-66E0F77273CD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123051:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "742B696E-8E4B-417F-97F6-3A131D0017C5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123052:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20F9623B-3CA5-4128-A626-696FAD2E938D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123053:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "364BAF6B-C6E2-4977-883B-51E2D367CC0D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123054:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF514A1F-F83E-46A7-A217-18ECD45E1D7B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123055:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EB86D22-755C-49D8-83C6-4DE640C48552"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123056:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8D3EBBA-C152-4424-837E-4A1D59610063"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123057:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5463E70-77A0-4420-B346-BDB1B31CFD76"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123062:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA0AF4B5-3B69-48AB-B6EA-096F2042B914"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123063:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "664A0889-B9F7-4F96-B57E-A72108958EA1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123064:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20AAF0D8-9E04-4BF3-8707-760C60C6B816"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123065:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B523991-88CD-4E23-A18F-E42D1F8EA9F5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123066:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBCA0076-38A6-447C-A2AE-10AFFECE6D24"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123067:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6108E08D-8F7C-4F69-A7DE-B34FF2811B77"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123068:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C030BDF-CDEA-498E-A755-C3A25D9D5024"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123069:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F492EAA6-DB82-4653-9ABE-DE41B5B4F17F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123070:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE8C8A77-2C7A-42A5-AAB1-CFA4E431E7D8"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123076:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A799504A-CA2F-4F79-B251-F09CC856378D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123077:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31C0753B-F3EB-4BF3-86C1-FF590552C721"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123078:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FAD4420-5942-482E-9E90-FD42DAFAE505"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123079:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA22B2CB-43A4-40C4-A104-8EB7B52F47C7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123080:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0627E0C8-24F8-4BD2-B48B-80C75FF9B308"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123081:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19C2CE00-9302-4700-BAFE-81A42A50CE53"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123082:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3D88293-837A-4112-83E9-34E87E636E5C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123083:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBA2ED18-B159-4F01-8B91-22B73924C324"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123084:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56FB1C69-5667-47A3-B286-DD193A14E3A4"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123086:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01D0B726-FB28-4DDB-AF14-0EF4D5D0C255"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123090:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01EC4348-26DA-41BE-81B3-A0F82DD3C2E5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123091:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87967B7F-8502-4A07-BF23-760AB427A674"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123092:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BFBDAF9-81D3-49E7-A6E7-2041E34D0E88"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123192:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4F53CF6-5783-43A2-BCF7-8E3872ABD922"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123193:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7530700-4F71-4E70-AF45-9D57CE331FCF"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123194:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B75AA05-6FFE-417A-8026-06F37B573569"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123195:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBC6E300-0ECB-40C3-AEB8-25123B6F0AFE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123196:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE6DAAFC-EE46-4E9F-A218-B9F2178D0BE1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123197:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2C3EB60-492F-45F2-9B47-83860FCC87D6"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123198:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "528D8F67-661C-4583-BB59-79CAC093BBEB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123204:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "135E8785-833E-4E32-BAC1-173F770FC690"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123205:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "438499EB-654C-4762-978C-BA3FE967C6AE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123206:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12C18281-5741-488D-89D7-125711D1A7BD"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123207:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A190DAB6-D0AA-4634-9415-5A4902CDB25B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123208:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C7B430C-B9A7-4AEC-84AB-90E08895A330"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123222:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3F7F501-1F21-4825-BD82-23ACA713FFD5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123223:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "422417EA-FF20-428A-AC02-18D4F84DA123"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123224:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59BCAF6B-CAC3-4142-B303-7B85B24C573C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123229:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "136E1AE8-723C-4A85-AC7A-A5FA557BE66F"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123230:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19BE3780-3FAB-46C9-9399-62C18EA1A322"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123231:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D32CDFC3-8041-426B-BBE0-245703D4D74E"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123237:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B95BC46-7679-415E-814B-29DA657A718E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}