Sql injection

2019-12-1118:16:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

JSON

Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function.

CPENameOperatorVersion
manageengine_applications_managerlt13.7

CPE	Name	Operator	Version
	manageengine_applications_manager	lt	13.7

References

gitlab.com/eLeN3Re/CVE-2019-19650

www.manageengine.com/products/applications_manager/release-notes.html