{"id":"CVE-2019-17602","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-17602","generatedAt":"2026-10-27T22:28:45.021Z","title":"The OPMDeviceDetailsServlet servlet is prone to SQL injection.","description":"An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated.","published":"2019-10-15T21:15:11.000Z","lastModified":"2026-06-17T02:24:16.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-89"],"affected":["zohocorp/manageengine opmanager"],"epss":{"score":0.8108,"percentile":0.99629,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 81.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://www.manageengine.com/network-monitoring/help/read-me-complete.html","tags":["Release Notes","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.manageengine.com/network-monitoring/help/read-me-complete.html","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-17602","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}