Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API.