CVE-2021-41081: Zohocorp ManageEngine Network Configuration Manager

Critical severity, CVSS 9.8. EPSS: 64.1% chance of exploitation in the next 30 days.

Zoho ManageEngine Network Configuration Manager before 125465 is vulnerable to SQL Injection in a configuration search.

Affected products

• Zohocorp ManageEngine Network Configuration Manager: from 12.4, before 12.5 (fixed in 12.5); version 12.3 only; version 12.5 only

Published 2021-11-11. Last modified 2026-06-17.