CVE-2021-41080

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a hardware details search.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-410819.8Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search.CVE-2021-410827.5Discourse is a platform for community discussion. In affected versions any private message that includes a group had its title and participaCVE-2021-410838.8Dada Mail is a web-based e-mail list management system. In affected versions a bad actor could give someone a carefully crafted web page viaCVE-2021-410844.7http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or request-splitting attaCVE-2021-410865.4jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scriCVE-2021-410876.5in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticateCVE-2021-410888.8Elvish is a programming language and interactive shell, combined into one package. In versions prior to 0.14.0 Elvish's web UI backend (starCVE-2021-410896.3Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attemptiCVE-2021-410907.5Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack. Prior to veCVE-2021-410916.3Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where the dataCVE-2021-410927.5Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running `docker login my-CVE-2021-410939.8Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an ac
CVE-2021-41080: Critical severity, CVSS 9.8 | Vulnix