Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

641 matches found

OSV
OSV•added 2019/07/23 11:15 p.m.•7 views

CVE-2019-2825

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

6.5CVSS6.7AI score0.01367EPSS
SaveExploits0References1
NVD
NVD•added 2019/07/23 11:15 p.m.•27 views

CVE-2019-2825

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

6.5CVSS5.8AI score0.01367EPSS
SaveExploits0References1
Prion
Prion•added 2019/07/23 11:15 p.m.•23 views

Design/Logic Flaw

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

5.5CVSS6.4AI score0.01367EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2019/07/23 10:31 p.m.•94 views

CVE-2019-2825

CVE-2019-2825 is a vulnerability in Oracle E-Business Suite’s Applications Manager (Diagnostics Interfaces). Affects Oracle E-Business Suite versions 12.1.3 and 12.2.3–12.2.8. The issue allows a high-privileged attacker with network access over HTTP to compromise Oracle Applications Manager, enab...

6.5CVSS6.7AI score0.01367EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2019/07/23 10:31 p.m.•34 views

CVE-2019-2825

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

6.9AI score0.01367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2019/07/23 10:31 p.m.•15 views

CVE-2019-2825

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

6.3AI score0.01367EPSS
SaveExploits0References1
CNVD
CNVD•added 2019/07/17 12:0 a.m.•13 views

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28430)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Applications Manager is one of the components used to monitor the...

6.5CVSS6.8AI score0.01367EPSS
SaveExploits0References1
CNVD
CNVD•added 2019/05/29 12:0 a.m.•8 views

ZOHO ManageEngine Applications Manager Information Disclosure Vulnerability

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. An information disclosure...

5.3CVSS6.2AI score0.03696EPSS
SaveExploits1References1
OSV
OSV•added 2019/05/23 6:29 p.m.•7 views

CVE-2017-11557

An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request...

5.3CVSS5.8AI score0.03696EPSS
SaveExploits1References4
NVD
NVD•added 2019/05/23 6:29 p.m.•22 views

CVE-2017-11557

An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request...

5.3CVSS5.2AI score0.03696EPSS
SaveExploits1References4
CVE
CVE•added 2019/05/23 5:17 p.m.•76 views

CVE-2017-11557

CVE-2017-11557 affects ZOHO ManageEngine Applications Manager 12.3. An unauthenticated user can access the endpoint userconfiguration.do?method=editUser to view the list of domain names and usernames used in the target’s network. This is an information disclosure vulnerability (no further details...

5.3CVSS5.2AI score0.03696EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist•added 2019/05/23 5:17 p.m.•34 views

CVE-2017-11557

An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request...

5.3AI score0.03696EPSS
SaveExploits1References4
OSV
OSV•added 2019/04/23 4:29 a.m.•9 views

CVE-2019-11469

Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Actions" feature...

9.8CVSS7.3AI score0.18362EPSS
SaveExploits3References5
Prion
Prion•added 2019/04/23 4:29 a.m.•23 views

Sql injection

Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Actions" feature...

10CVSS10AI score0.18362EPSS
SaveExploits3References5Affected Software1
Cvelist
Cvelist•added 2019/04/23 3:12 a.m.•30 views

CVE-2019-11469

Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Actions" feature...

10AI score0.18362EPSS
SaveExploits3References5
CVE
CVE•added 2019/04/23 3:12 a.m.•73 views

CVE-2019-11469

Zoho ManageEngine Applications Manager 12–14 is affected by a FaultTemplateOptions.jsp resourceid SQL injection. The underlying issue allows an unauthenticated attacker to upload a malicious file via the app’s Execute Program Action(s) feature, enabling the attacker to gain the server’s SYSTEM au...

10CVSS10AI score0.18362EPSS
SaveExploits3References5Affected Software1
Packet Storm
Packet Storm•added 2019/04/23 12:0 a.m.•70 views

ManageEngine Applications Manager 14.0 SQL Injection / Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ManageEngine Applications Manager %q This module exploits sqli and command injection vulnerability in the ManageEngine AM 14 and prior versions. I...

0.3AI score0.18362EPSS
SaveExploits3
NVD
NVD•added 2019/04/22 11:29 a.m.•25 views

CVE-2019-11448

An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain the authority of SYSTEM on the server due to a PopupSLA.jsp sid SQL injection vulnerability. For example, the attacker can subsequently write arbitrary text to a .vbs file...

10CVSS9.9AI score0.12428EPSS
SaveExploits2References4
OSV
OSV•added 2019/04/22 11:29 a.m.•8 views

CVE-2019-11448

An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain the authority of SYSTEM on the server due to a PopupSLA.jsp sid SQL injection vulnerability. For example, the attacker can subsequently write arbitrary text to a .vbs file...

9.8CVSS7.5AI score0.12428EPSS
SaveExploits2References4
Prion
Prion•added 2019/04/22 11:29 a.m.•17 views

Sql injection

An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain the authority of SYSTEM on the server due to a PopupSLA.jsp sid SQL injection vulnerability. For example, the attacker can subsequently write arbitrary text to a .vbs file...

10CVSS9.8AI score0.12428EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder