Sql injection

2019-12-1118:16:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

JSON

Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.

CPENameOperatorVersion
manageengine_applications_managerlt13.7

CPE	Name	Operator	Version
	manageengine_applications_manager	lt	13.7

References

gitlab.com/eLeN3Re/CVE-2019-19649

www.manageengine.com/products/applications_manager/release-notes.html