Lucene search
HistoryJan 19, 2021 - 4:15 p.m.
CVE-2020-27733
cve-2020-27733
sql injection
zoho manageengine
applications manager
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.6%
Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request.
Affected configurations
Node
zohocorpmanageengine_applications_managerMatch14.0-
ORzohocorpmanageengine_applications_managerMatch14.0build14000
ORzohocorpmanageengine_applications_managerMatch14.0build14010
ORzohocorpmanageengine_applications_managerMatch14.0build14020
ORzohocorpmanageengine_applications_managerMatch14.0build14030
ORzohocorpmanageengine_applications_managerMatch14.0build14040
ORzohocorpmanageengine_applications_managerMatch14.0build14050
ORzohocorpmanageengine_applications_managerMatch14.0build14060
ORzohocorpmanageengine_applications_managerMatch14.0build14070
ORzohocorpmanageengine_applications_managerMatch14.0build14071
ORzohocorpmanageengine_applications_managerMatch14.0build14072
ORzohocorpmanageengine_applications_managerMatch14.0build14073
ORzohocorpmanageengine_applications_managerMatch14.0build14080
ORzohocorpmanageengine_applications_managerMatch14.0build14090
ORzohocorpmanageengine_applications_managerMatch14.0build14100
ORzohocorpmanageengine_applications_managerMatch14.0build14110
ORzohocorpmanageengine_applications_managerMatch14.0build14120
ORzohocorpmanageengine_applications_managerMatch14.0build14130
ORzohocorpmanageengine_applications_managerMatch14.0build14140
ORzohocorpmanageengine_applications_managerMatch14.0build14150
ORzohocorpmanageengine_applications_managerMatch14.0build14160
ORzohocorpmanageengine_applications_managerMatch14.0build14170
ORzohocorpmanageengine_applications_managerMatch14.0build14180
ORzohocorpmanageengine_applications_managerMatch14.0build14190
ORzohocorpmanageengine_applications_managerMatch14.0build14200
ORzohocorpmanageengine_applications_managerMatch14.0build14210
ORzohocorpmanageengine_applications_managerMatch14.0build14220
ORzohocorpmanageengine_applications_managerMatch14.0build14230
ORzohocorpmanageengine_applications_managerMatch14.0build14240
ORzohocorpmanageengine_applications_managerMatch14.0build14250
ORzohocorpmanageengine_applications_managerMatch14.0build14260
ORzohocorpmanageengine_applications_managerMatch14.0build14261
ORzohocorpmanageengine_applications_managerMatch14.0build14262
ORzohocorpmanageengine_applications_managerMatch14.0build14270
ORzohocorpmanageengine_applications_managerMatch14.0build14280
ORzohocorpmanageengine_applications_managerMatch14.0build14290
ORzohocorpmanageengine_applications_managerMatch14.0build14300
ORzohocorpmanageengine_applications_managerMatch14.0build14310
ORzohocorpmanageengine_applications_managerMatch14.0build14330
ORzohocorpmanageengine_applications_managerMatch14.0build14331
ORzohocorpmanageengine_applications_managerMatch14.0build14332
ORzohocorpmanageengine_applications_managerMatch14.0build14340
ORzohocorpmanageengine_applications_managerMatch14.0build14350
ORzohocorpmanageengine_applications_managerMatch14.0build14360
ORzohocorpmanageengine_applications_managerMatch14.0build14361
ORzohocorpmanageengine_applications_managerMatch14.0build14370
ORzohocorpmanageengine_applications_managerMatch14.0build14380
ORzohocorpmanageengine_applications_managerMatch14.0build14390
ORzohocorpmanageengine_applications_managerMatch14.0build14400
ORzohocorpmanageengine_applications_managerMatch14.0build14401
ORzohocorpmanageengine_applications_managerMatch14.0build14410
ORzohocorpmanageengine_applications_managerMatch14.0build14420
ORzohocorpmanageengine_applications_managerMatch14.0build14430
ORzohocorpmanageengine_applications_managerMatch14.0build14440
ORzohocorpmanageengine_applications_managerMatch14.0build14450
ORzohocorpmanageengine_applications_managerMatch14.0build14460
ORzohocorpmanageengine_applications_managerMatch14.0build14470
ORzohocorpmanageengine_applications_managerMatch14.0build14480
ORzohocorpmanageengine_applications_managerMatch14.0build14490
ORzohocorpmanageengine_applications_managerMatch14.0build14500
ORzohocorpmanageengine_applications_managerMatch14.0build14510
ORzohocorpmanageengine_applications_managerMatch14.0build14520
ORzohocorpmanageengine_applications_managerMatch14.0build14530
ORzohocorpmanageengine_applications_managerMatch14.0build14531
ORzohocorpmanageengine_applications_managerMatch14.0build14532
ORzohocorpmanageengine_applications_managerMatch14.0build14533
ORzohocorpmanageengine_applications_managerMatch14.0build14540
ORzohocorpmanageengine_applications_managerMatch14.0build14550
ORzohocorpmanageengine_applications_managerMatch14.0build14560
ORzohocorpmanageengine_applications_managerMatch14.0build14570
ORzohocorpmanageengine_applications_managerMatch14.0build14580
ORzohocorpmanageengine_applications_managerMatch14.0build14590
ORzohocorpmanageengine_applications_managerMatch14.0build14600
ORzohocorpmanageengine_applications_managerMatch14.0build14610
ORzohocorpmanageengine_applications_managerMatch14.0build14620
ORzohocorpmanageengine_applications_managerMatch14.0build14630
ORzohocorpmanageengine_applications_managerMatch14.0build14660
ORzohocorpmanageengine_applications_managerMatch14.0build14670
ORzohocorpmanageengine_applications_managerMatch14.0build14681
ORzohocorpmanageengine_applications_managerMatch14.0build14682
ORzohocorpmanageengine_applications_managerMatch14.0build14683
ORzohocorpmanageengine_applications_managerMatch14.0build14684
ORzohocorpmanageengine_applications_managerMatch14.0build14685
ORzohocorpmanageengine_applications_managerMatch14.0build14690
ORzohocorpmanageengine_applications_managerMatch14.0build14700
ORzohocorpmanageengine_applications_managerMatch14.0build14710
ORzohocorpmanageengine_applications_managerMatch14.0build14720
ORzohocorpmanageengine_applications_managerMatch14.0build14730
ORzohocorpmanageengine_applications_managerMatch14.0build14740
ORzohocorpmanageengine_applications_managerMatch14.0build14750
ORzohocorpmanageengine_applications_managerMatch14.0build14760
ORzohocorpmanageengine_applications_managerMatch14.0build14770
ORzohocorpmanageengine_applications_managerMatch14.0build14780
ORzohocorpmanageengine_applications_managerMatch14.0build14781
ORzohocorpmanageengine_applications_managerMatch14.0build14790
ORzohocorpmanageengine_applications_managerMatch14.0build14800
ORzohocorpmanageengine_applications_managerMatch14.0build14811
ORzohocorpmanageengine_applications_managerMatch14.0build14820
ORzohocorpmanageengine_applications_managerMatch14.0build14830
ORzohocorpmanageengine_applications_managerMatch14.0build14840
ORzohocorpmanageengine_applications_managerMatch14.0build14841
ORzohocorpmanageengine_applications_managerMatch14.0build14842
ORzohocorpmanageengine_applications_managerMatch14.0build14843
ORzohocorpmanageengine_applications_managerMatch14.0build14850
ORzohocorpmanageengine_applications_managerMatch14.0build14860
ORzohocorpmanageengine_applications_managerMatch14.0build14870
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_applications_manager | zohocorp manageengine applications manager | eq | 14.0 |
References
Social References
More
Related
nvd
nvd
CVE-2020-27733
2021-01-19 16:15:12
prion
prion
Sql injection
2021-01-19 16:15:00
cvelist
cvelist
CVE-2020-27733
2021-01-19 15:53:26
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
6.5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2020-27733