CVE-2019-19649

2019-12-1117:57:41

mitre

www.cve.org

AI Score

9.9

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON

Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.

References

gitlab.com/eLeN3Re/CVE-2019-19649

www.manageengine.com/products/applications_manager/release-notes.html