CVE-2022-27908: Zohocorp ManageEngine Opmanager

High severity, CVSS 8.8. EPSS: 36.5% chance of exploitation in the next 30 days.

Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.

Affected products

• Zohocorp ManageEngine Opmanager: before 12.5 (fixed in 12.5); version 12.5 only

Published 2022-04-18. Last modified 2026-06-17.