Sql injection

2021-01-1916:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request.

CPENameOperatorVersion
manageengine_applications_managereq14.0 build14500
manageengine_applications_managereq14.0 build14490
manageengine_applications_managereq14.0 build14480
manageengine_applications_managereq14.0 build14470
manageengine_applications_managereq14.0 build14460
manageengine_applications_managereq14.0 build14450
manageengine_applications_managereq14.0 build14440
manageengine_applications_managereq14.0 build14430
manageengine_applications_managereq14.0 build14401
manageengine_applications_managereq14.0 build14420

Name	Operator	Version
manageengine_applications_manager	eq	14.0 build14500
manageengine_applications_manager	eq	14.0 build14490
manageengine_applications_manager	eq	14.0 build14480
manageengine_applications_manager	eq	14.0 build14470
manageengine_applications_manager	eq	14.0 build14460
manageengine_applications_manager	eq	14.0 build14450
manageengine_applications_manager	eq	14.0 build14440
manageengine_applications_manager	eq	14.0 build14430
manageengine_applications_manager	eq	14.0 build14401
manageengine_applications_manager	eq	14.0 build14420