Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1) customerName or (2) serverRole parameter in a standbyUpdateInCentral operation to servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-02-04T16:00:00

Updated: 2024-08-06T13:03:27.505Z

Reserved: 2014-10-05T00:00:00

Link: CVE-2014-7864

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-02-04T16:59:00.060

Modified: 2024-11-21T02:18:10.010

Link: CVE-2014-7864

cve-icon Redhat

No data.