#1: CVE-2016-82014: Operations Manager - An SQL injection flaw was reported to ManageEngine on 2014/08/19 by Andrea Micalizzi (rgod), affecting version 11.3 and 11.4 of ManageEngine OpManager, and said to be patched in version 11.5 on 2014/11/10. This issue was assigned CVE-2014-7867, summarized as "ManageEngine OpManager /servlet/APMBVHandler OPM_BVNAME Parameter SQL Injection".