Sql injection

2020-10-0619:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

JSON

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module.

CPENameOperatorVersion
manageengine_applications_managereq14.7 build14700
manageengine_applications_managereq14.7 build14710
manageengine_applications_managereq14.7 build14720
manageengine_applications_managereq14.7 build14730
manageengine_applications_managereq14.7 build14740
manageengine_applications_managereq14.7
manageengine_applications_managereq14.7

Name	Operator	Version
manageengine_applications_manager	eq	14.7 build14700
manageengine_applications_manager	eq	14.7 build14710
manageengine_applications_manager	eq	14.7 build14720
manageengine_applications_manager	eq	14.7 build14730
manageengine_applications_manager	eq	14.7 build14740
manageengine_applications_manager	eq	14.7
manageengine_applications_manager	eq	14.7