CVE-2026-14913

Summary

ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports.

Affected Software

VendorProductVersion RangeStatus
ZohocorpManageEngine OpManager0 < 12.8.670affected
ZohocorpManageEngine Firewall Analyzer0 < 12.8.670affected

Weaknesses

  • CWE-89: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References