CVE-2018-18949 (GCVE-0-2018-18949)
Vulnerability from cvelistv5 – Published: 2018-11-05 09:00 – Updated: 2024-09-16 17:09
VLAI
EPSS
VEX
Summary
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
Severity
9.8 (Critical)
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.manageengine.com/network-monitoring/h… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:23:08.563Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.manageengine.com/network-monitoring/help/read-me.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-11-05T09:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.manageengine.com/network-monitoring/help/read-me.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-18949",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.manageengine.com/network-monitoring/help/read-me.html",
"refsource": "MISC",
"url": "https://www.manageengine.com/network-monitoring/help/read-me.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-18949",
"datePublished": "2018-11-05T09:00:00.000Z",
"dateReserved": "2018-11-05T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:09:10.191Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2018-18949",
"date": "2026-09-23",
"epss": "0.24498",
"percentile": "0.97778"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:11.4:*:*:*:*:*:*:*",
"matchCriteriaId": "CBBE120C-35D5-4D2E-A00D-5B75A6C6BFEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:11.5:*:*:*:*:*:*:*",
"matchCriteriaId": "371AF6D4-091B-41E2-9B82-902650F87702",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:*:*:*:*:*:*:*",
"matchCriteriaId": "11843753-531F-4D94-AC7F-F23D6EC8728F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build12300:*:*:*:*:*:*",
"matchCriteriaId": "8B8C57C8-97BD-4AD9-BC6D-EB76620F965E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123001:*:*:*:*:*:*",
"matchCriteriaId": "86EB5F5D-FA8C-4B65-93D3-3B05579C3E32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123002:*:*:*:*:*:*",
"matchCriteriaId": "686CBBE4-045A-4114-98BA-CE397D103DA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123003:*:*:*:*:*:*",
"matchCriteriaId": "0ED75046-7450-4AEF-BCF8-0643FE9DD02C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123004:*:*:*:*:*:*",
"matchCriteriaId": "9AC5C2AC-B31B-4759-8279-9E2846C09AD3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123005:*:*:*:*:*:*",
"matchCriteriaId": "2D3150D9-2411-47A3-912E-2A7B81012E7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123006:*:*:*:*:*:*",
"matchCriteriaId": "EF11B001-835D-4F2A-9CE4-AAD28F830038",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123007:*:*:*:*:*:*",
"matchCriteriaId": "563BCC3B-5CC5-437F-91F1-A4AB7063489E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123008:*:*:*:*:*:*",
"matchCriteriaId": "6400A3F5-333F-4209-A4C7-C57E2A69B455",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123009:*:*:*:*:*:*",
"matchCriteriaId": "9FEB2E01-6815-4D38-8120-DEC41C778A83",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123010:*:*:*:*:*:*",
"matchCriteriaId": "8C34E591-6A6F-4363-A2CF-A5C22E97F475",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123011:*:*:*:*:*:*",
"matchCriteriaId": "48C8197C-0662-427F-80EB-1D43E13A8188",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123012:*:*:*:*:*:*",
"matchCriteriaId": "9774BC15-7D33-4E73-91A6-FBE6D836AEE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123013:*:*:*:*:*:*",
"matchCriteriaId": "65125E3F-65D7-4178-8256-1DFA4F7EE8A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123014:*:*:*:*:*:*",
"matchCriteriaId": "47DF37DF-1A58-445F-91FF-5F42DA8144AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123015:*:*:*:*:*:*",
"matchCriteriaId": "0FE05E0C-2A98-4F1F-AFB9-08DD10394403",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123021:*:*:*:*:*:*",
"matchCriteriaId": "88EFA32A-390D-481C-B261-3445F1937018",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123022:*:*:*:*:*:*",
"matchCriteriaId": "C5709B4B-2C63-45C5-ABAD-EB320C20A85F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123023:*:*:*:*:*:*",
"matchCriteriaId": "068147C0-404F-4573-964C-7BBB1ADA6202",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123024:*:*:*:*:*:*",
"matchCriteriaId": "1E9630D5-5759-416A-A460-8166134C8C74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123025:*:*:*:*:*:*",
"matchCriteriaId": "1A1A9B60-D6A3-41C7-9487-5A46043EE012",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123026:*:*:*:*:*:*",
"matchCriteriaId": "B697D006-8945-4CF7-B571-92A212684CD6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123027:*:*:*:*:*:*",
"matchCriteriaId": "F028F31A-9273-43D8-8495-9D429394426D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123028:*:*:*:*:*:*",
"matchCriteriaId": "117334A2-6518-4703-8C73-5B6A9D08D8FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123029:*:*:*:*:*:*",
"matchCriteriaId": "31C006D0-3B9B-4BE6-8A9F-5EAD2E689373",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123030:*:*:*:*:*:*",
"matchCriteriaId": "933E68D4-6C02-4582-AC5F-812A578FFD1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123031:*:*:*:*:*:*",
"matchCriteriaId": "BAC430B6-52E2-4912-B1FD-9C7FB5D78BDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123032:*:*:*:*:*:*",
"matchCriteriaId": "75DE01FC-38A4-4C86-88C0-573686AD5989",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123033:*:*:*:*:*:*",
"matchCriteriaId": "7157CF3A-F41F-4019-A22A-EF11EFE1BEE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123034:*:*:*:*:*:*",
"matchCriteriaId": "32BADD0E-8892-4BC2-B00C-8CBE9A71CACB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123035:*:*:*:*:*:*",
"matchCriteriaId": "737F0FA9-B08D-4CBA-A4A9-F5694DF94A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123036:*:*:*:*:*:*",
"matchCriteriaId": "7235E285-FD10-47BD-A813-0E99545A475A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123037:*:*:*:*:*:*",
"matchCriteriaId": "2674AF0C-1933-4A67-81B6-33367BA2B47A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123043:*:*:*:*:*:*",
"matchCriteriaId": "D3496F4B-11F9-46C0-B3D0-EF72781F82E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123044:*:*:*:*:*:*",
"matchCriteriaId": "53B6CDCF-6DB1-417D-AF2A-41FB4C9FA038",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123045:*:*:*:*:*:*",
"matchCriteriaId": "884B89C3-F8A0-41BA-A485-2C4B9B26B5F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123046:*:*:*:*:*:*",
"matchCriteriaId": "465178DC-8C4A-4E77-9837-D50892CD817F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123047:*:*:*:*:*:*",
"matchCriteriaId": "BF26A72D-C2DA-4FCE-8FE1-6C60CF5B9B4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123048:*:*:*:*:*:*",
"matchCriteriaId": "B74591DE-ABC2-49DF-9761-0E3EC88CACF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123049:*:*:*:*:*:*",
"matchCriteriaId": "BCFD5A1C-6B9F-4C9E-9183-D891A4955A8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123050:*:*:*:*:*:*",
"matchCriteriaId": "F6391BA4-7D59-489A-8B4E-66E0F77273CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123051:*:*:*:*:*:*",
"matchCriteriaId": "742B696E-8E4B-417F-97F6-3A131D0017C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123052:*:*:*:*:*:*",
"matchCriteriaId": "20F9623B-3CA5-4128-A626-696FAD2E938D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123053:*:*:*:*:*:*",
"matchCriteriaId": "364BAF6B-C6E2-4977-883B-51E2D367CC0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123054:*:*:*:*:*:*",
"matchCriteriaId": "FF514A1F-F83E-46A7-A217-18ECD45E1D7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123055:*:*:*:*:*:*",
"matchCriteriaId": "9EB86D22-755C-49D8-83C6-4DE640C48552",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123056:*:*:*:*:*:*",
"matchCriteriaId": "C8D3EBBA-C152-4424-837E-4A1D59610063",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123057:*:*:*:*:*:*",
"matchCriteriaId": "C5463E70-77A0-4420-B346-BDB1B31CFD76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123062:*:*:*:*:*:*",
"matchCriteriaId": "AA0AF4B5-3B69-48AB-B6EA-096F2042B914",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123063:*:*:*:*:*:*",
"matchCriteriaId": "664A0889-B9F7-4F96-B57E-A72108958EA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123064:*:*:*:*:*:*",
"matchCriteriaId": "20AAF0D8-9E04-4BF3-8707-760C60C6B816",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123065:*:*:*:*:*:*",
"matchCriteriaId": "5B523991-88CD-4E23-A18F-E42D1F8EA9F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123066:*:*:*:*:*:*",
"matchCriteriaId": "EBCA0076-38A6-447C-A2AE-10AFFECE6D24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123067:*:*:*:*:*:*",
"matchCriteriaId": "6108E08D-8F7C-4F69-A7DE-B34FF2811B77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123068:*:*:*:*:*:*",
"matchCriteriaId": "2C030BDF-CDEA-498E-A755-C3A25D9D5024",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123069:*:*:*:*:*:*",
"matchCriteriaId": "F492EAA6-DB82-4653-9ABE-DE41B5B4F17F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123070:*:*:*:*:*:*",
"matchCriteriaId": "DE8C8A77-2C7A-42A5-AAB1-CFA4E431E7D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123076:*:*:*:*:*:*",
"matchCriteriaId": "A799504A-CA2F-4F79-B251-F09CC856378D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123077:*:*:*:*:*:*",
"matchCriteriaId": "31C0753B-F3EB-4BF3-86C1-FF590552C721",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123078:*:*:*:*:*:*",
"matchCriteriaId": "7FAD4420-5942-482E-9E90-FD42DAFAE505",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123079:*:*:*:*:*:*",
"matchCriteriaId": "EA22B2CB-43A4-40C4-A104-8EB7B52F47C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123080:*:*:*:*:*:*",
"matchCriteriaId": "0627E0C8-24F8-4BD2-B48B-80C75FF9B308",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123081:*:*:*:*:*:*",
"matchCriteriaId": "19C2CE00-9302-4700-BAFE-81A42A50CE53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123082:*:*:*:*:*:*",
"matchCriteriaId": "A3D88293-837A-4112-83E9-34E87E636E5C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123083:*:*:*:*:*:*",
"matchCriteriaId": "BBA2ED18-B159-4F01-8B91-22B73924C324",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123084:*:*:*:*:*:*",
"matchCriteriaId": "56FB1C69-5667-47A3-B286-DD193A14E3A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123086:*:*:*:*:*:*",
"matchCriteriaId": "01D0B726-FB28-4DDB-AF14-0EF4D5D0C255",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123090:*:*:*:*:*:*",
"matchCriteriaId": "01EC4348-26DA-41BE-81B3-A0F82DD3C2E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123091:*:*:*:*:*:*",
"matchCriteriaId": "87967B7F-8502-4A07-BF23-760AB427A674",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123092:*:*:*:*:*:*",
"matchCriteriaId": "6BFBDAF9-81D3-49E7-A6E7-2041E34D0E88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123093:*:*:*:*:*:*",
"matchCriteriaId": "92283FA5-E9BF-4526-8335-21CAC337507A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123104:*:*:*:*:*:*",
"matchCriteriaId": "4E7DBDD1-5CD0-48E6-8DD1-BF32C38A4CF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123105:*:*:*:*:*:*",
"matchCriteriaId": "D62F2677-2A2B-4BC3-B165-D3EEF7013A03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123106:*:*:*:*:*:*",
"matchCriteriaId": "BA918111-577F-4A12-9EBC-E9AED63CA98C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123107:*:*:*:*:*:*",
"matchCriteriaId": "F0934788-71B1-4BEA-BF01-4BDD87B3F8A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123108:*:*:*:*:*:*",
"matchCriteriaId": "A1CA9C41-987C-48F1-831D-67ADB6F2C020",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123109:*:*:*:*:*:*",
"matchCriteriaId": "892F3D78-767F-4D09-A465-E875EF27C595",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123110:*:*:*:*:*:*",
"matchCriteriaId": "9FA31E62-2C3A-416D-B472-2BB20981274F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123111:*:*:*:*:*:*",
"matchCriteriaId": "E1791915-2039-4108-AEC2-7505D7CF4A09",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123112:*:*:*:*:*:*",
"matchCriteriaId": "9B8E718C-D235-4393-8839-C715C9391406",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123113:*:*:*:*:*:*",
"matchCriteriaId": "C746C3B4-B96C-4277-BCF1-9F3FBE4E52C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123114:*:*:*:*:*:*",
"matchCriteriaId": "506FC691-EF45-407F-AB6F-A6260C7F5825",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123115:*:*:*:*:*:*",
"matchCriteriaId": "7F77AF32-BDB4-4366-8CC6-51452FC7C01C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123116:*:*:*:*:*:*",
"matchCriteriaId": "5C72DC47-6E38-4C4D-BAC4-11FC8CA15D35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123117:*:*:*:*:*:*",
"matchCriteriaId": "F056F4E7-5FFF-4F7D-A2A0-B90E818A8BE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123118:*:*:*:*:*:*",
"matchCriteriaId": "30BEFF4D-8F03-4DEA-9441-3C8009DC0D5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123119:*:*:*:*:*:*",
"matchCriteriaId": "194EF105-2F2C-4FBE-83EA-99E46A3E1A41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123120:*:*:*:*:*:*",
"matchCriteriaId": "5A3BB136-FB9D-4326-BB92-E3E95FF3D0E3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123121:*:*:*:*:*:*",
"matchCriteriaId": "25ED8015-6FF6-4762-A3CE-C765F3DFC2EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123122:*:*:*:*:*:*",
"matchCriteriaId": "2D0A8CFE-0EC7-4798-8F78-A95CFDD46DCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123123:*:*:*:*:*:*",
"matchCriteriaId": "181D3E21-D22B-43DC-AB61-85EADB051DF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123124:*:*:*:*:*:*",
"matchCriteriaId": "8623755B-843B-4A35-9EA1-DDADC6D04790",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123125:*:*:*:*:*:*",
"matchCriteriaId": "5069B771-C164-42B6-A69E-E7FB6D1659BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123126:*:*:*:*:*:*",
"matchCriteriaId": "2A54234E-07E7-4E2B-B6B1-3D9593EECA87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123127:*:*:*:*:*:*",
"matchCriteriaId": "D8199FCF-96B0-4F2A-9843-C58794D9AA4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123136:*:*:*:*:*:*",
"matchCriteriaId": "3A1FA00E-7E1C-4DD3-85ED-6FE876EB3070",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123137:*:*:*:*:*:*",
"matchCriteriaId": "7913B5C1-8918-4B72-9EE5-7CC566ABC06A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123147:*:*:*:*:*:*",
"matchCriteriaId": "EF306D16-22D0-4021-9AEA-58037B8E1817",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123148:*:*:*:*:*:*",
"matchCriteriaId": "EB9F1053-4BEA-41CC-8690-7CD91A93809E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123149:*:*:*:*:*:*",
"matchCriteriaId": "71DC8E77-BEA1-4C5D-A893-F0B1777914F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123150:*:*:*:*:*:*",
"matchCriteriaId": "284144C0-7D49-4B3D-AFD0-1B5CB588E8AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123156:*:*:*:*:*:*",
"matchCriteriaId": "E929F1C7-6360-4B62-BCA2-481E6BDA9343",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123157:*:*:*:*:*:*",
"matchCriteriaId": "D631CE06-3699-41EF-A16A-29317863EE5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123158:*:*:*:*:*:*",
"matchCriteriaId": "DEBF570C-37E6-495E-B440-1BE770B52C6D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123159:*:*:*:*:*:*",
"matchCriteriaId": "E77B59F9-C293-4825-9C20-0217913FFCE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123160:*:*:*:*:*:*",
"matchCriteriaId": "4E47C098-A3A5-430F-9868-76AFD1F4880A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123161:*:*:*:*:*:*",
"matchCriteriaId": "003FD386-8F7C-419E-A32A-56BCDE939758",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123162:*:*:*:*:*:*",
"matchCriteriaId": "B0CE1909-73A7-4985-91BD-2504EAEEC7B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123163:*:*:*:*:*:*",
"matchCriteriaId": "5432A121-8A79-4BB7-BA34-889F268862BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123164:*:*:*:*:*:*",
"matchCriteriaId": "D7A1BDA3-BC80-4713-9A61-368D0D2034C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123165:*:*:*:*:*:*",
"matchCriteriaId": "595A8799-10FD-4CBD-A31D-862AF3811D25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123166:*:*:*:*:*:*",
"matchCriteriaId": "A8DB1791-3C3D-4B32-A053-F32CF75157AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123167:*:*:*:*:*:*",
"matchCriteriaId": "F80D628A-0EEE-4CAE-B554-FF049563486C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123168:*:*:*:*:*:*",
"matchCriteriaId": "7D6C0821-9F50-46F1-9D80-716084D4D449",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123169:*:*:*:*:*:*",
"matchCriteriaId": "26272C3B-E7F4-422B-8820-5D1E1060B449",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123175:*:*:*:*:*:*",
"matchCriteriaId": "0D93D99C-237B-4C71-A287-ECDE1576E045",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123176:*:*:*:*:*:*",
"matchCriteriaId": "908CDBFD-130A-4C5C-BFB6-2D2C71E4F7B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123177:*:*:*:*:*:*",
"matchCriteriaId": "FA117A3F-5FEF-41B4-AE65-49BC47FFCF56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123178:*:*:*:*:*:*",
"matchCriteriaId": "1524EFB3-8B49-4002-800E-2C222EDFA894",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123179:*:*:*:*:*:*",
"matchCriteriaId": "59C93D3E-9E2F-434D-ACBB-0DDA7365AA0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123180:*:*:*:*:*:*",
"matchCriteriaId": "A26D17E0-8283-4C03-86F8-CCCA8586D54E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123181:*:*:*:*:*:*",
"matchCriteriaId": "9A1A7F93-72B0-474B-A670-FF0D60824FD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123182:*:*:*:*:*:*",
"matchCriteriaId": "70FDBF91-DDC1-48FC-B99B-37DF3F804AE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123183:*:*:*:*:*:*",
"matchCriteriaId": "459A77F8-CC7C-4017-8D35-58C3266C0804",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123184:*:*:*:*:*:*",
"matchCriteriaId": "FA91D7C0-DB3B-4366-907B-3E1202930466",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123185:*:*:*:*:*:*",
"matchCriteriaId": "873F377A-6CEE-4FF2-8471-AEEF49E27901",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123186:*:*:*:*:*:*",
"matchCriteriaId": "7C72013D-D878-4E62-9795-007F34449121",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123187:*:*:*:*:*:*",
"matchCriteriaId": "2C37D72E-9307-455D-92E6-98CC28E1531B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123188:*:*:*:*:*:*",
"matchCriteriaId": "5A56B778-8672-402C-87A9-E20D8779F29C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123189:*:*:*:*:*:*",
"matchCriteriaId": "64757ED0-29EA-45FB-80F5-A1E036343535",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123190:*:*:*:*:*:*",
"matchCriteriaId": "C265797E-90CF-40FA-A6F1-A98C5DCC5EB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123191:*:*:*:*:*:*",
"matchCriteriaId": "524E2761-4B43-46FC-AE7E-134476556B92",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123192:*:*:*:*:*:*",
"matchCriteriaId": "A4F53CF6-5783-43A2-BCF7-8E3872ABD922",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123193:*:*:*:*:*:*",
"matchCriteriaId": "F7530700-4F71-4E70-AF45-9D57CE331FCF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123194:*:*:*:*:*:*",
"matchCriteriaId": "3B75AA05-6FFE-417A-8026-06F37B573569",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123195:*:*:*:*:*:*",
"matchCriteriaId": "EBC6E300-0ECB-40C3-AEB8-25123B6F0AFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123196:*:*:*:*:*:*",
"matchCriteriaId": "DE6DAAFC-EE46-4E9F-A218-B9F2178D0BE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123197:*:*:*:*:*:*",
"matchCriteriaId": "A2C3EB60-492F-45F2-9B47-83860FCC87D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123198:*:*:*:*:*:*",
"matchCriteriaId": "528D8F67-661C-4583-BB59-79CAC093BBEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123204:*:*:*:*:*:*",
"matchCriteriaId": "135E8785-833E-4E32-BAC1-173F770FC690",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123205:*:*:*:*:*:*",
"matchCriteriaId": "438499EB-654C-4762-978C-BA3FE967C6AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123206:*:*:*:*:*:*",
"matchCriteriaId": "12C18281-5741-488D-89D7-125711D1A7BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123207:*:*:*:*:*:*",
"matchCriteriaId": "A190DAB6-D0AA-4634-9415-5A4902CDB25B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123208:*:*:*:*:*:*",
"matchCriteriaId": "7C7B430C-B9A7-4AEC-84AB-90E08895A330",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123214:*:*:*:*:*:*",
"matchCriteriaId": "CBF58EC7-2DDA-4EC0-8406-F3B711B62974",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123215:*:*:*:*:*:*",
"matchCriteriaId": "CD036146-E374-4571-9302-9978CD892805",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123217:*:*:*:*:*:*",
"matchCriteriaId": "7112E33A-C694-432D-8880-BB2211EBA5F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123218:*:*:*:*:*:*",
"matchCriteriaId": "932A2D27-CC0E-4F33-AD0C-4876984F1F26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123219:*:*:*:*:*:*",
"matchCriteriaId": "2C55FF31-14E0-4D66-9F33-CF907B684C15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123220:*:*:*:*:*:*",
"matchCriteriaId": "4F8BD66B-6AB2-46C9-8133-6677ACBEDC10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_opmanager:12.3:build123221:*:*:*:*:*:*",
"matchCriteriaId": "54DA156C-85E1-4A2D-9612-02C05180AB06",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings."
},
{
"lang": "es",
"value": "KindEditor hasta la versi\u00f3n 4.1.11 tiene una vulnerabilidad de salto de directorio en php/upload_json.php. Cualquiera puede buscar un archivo o directorio en la carpeta kindeditor/attached/ mediante el par\u00e1metro path sin autenticaci\u00f3n."
}
],
"id": "CVE-2018-18949",
"lastModified": "2024-11-21T03:56:55.797",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-11-05T09:29:00.667",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://www.manageengine.com/network-monitoring/help/read-me.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.manageengine.com/network-monitoring/help/read-me.html"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…