Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09270
HistoryJun 11, 2021 - 12:00 a.m.

Zoho ManageEngine Eventlog Analyzer Path Traversal Vulnerability

2021-06-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
zoho manageengine
eventlog analyzer
path traversal
vulnerability
remote code execution
zip archive
directory traversal
software
analysis
log
cnvd

EPSS

0.007

Percentile

81.0%

ZOHO ManageEngine EventLog Analyzer is a system and event log analysis software from ZOHO. A path traversal vulnerability exists in Zoho ManageEngine Eventlog Analyzer 12147 and earlier versions, which is caused by an unauthenticated directory traversal through a ZIP archive entry. An attacker could exploit this vulnerability to cause remote code execution.

EPSS

0.007

Percentile

81.0%

Related for CNVD-2022-09270