Lucene search
+L

882 matches found

Vulnrichment
Vulnrichment
•added 2021/04/22 9:53 p.m.•15 views

CVE-2021-2275

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: View Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

6.5CVSS6.5AI score0.00968EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/04/22 9:53 p.m.•30 views

CVE-2021-2275

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: View Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

6.5CVSS7.2AI score0.00968EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/22 12:00 a.m.•22 views

Unspecified Vulnerability in Oracle Applications Manager

Oracle Applications Manager is an application management software from Oracle USA. The software provides monitoring, trending, and fault management for Oracle data files. A security vulnerability exists in Oracle Applications Manager View Reports 12.1.3, 12.2.3-12.2.10, which allows a highly...

6.5CVSS6.4AI score0.00968EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•5 views

CVE-2021-2275: Undefined Security Weakness

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: View Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

6.5CVSS5.7AI score0.00968EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•1 views

PT-2021-3144

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the View Reports component of Oracle Applications Manager. It allows a high-privileged attacker with networ...

8.5CVSS0.00968EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•21 views

Oracle Applications Manager 安全漏洞

Oracle Applications Manager is an application management software from Oracle USA. The software provides monitoring, trending, and fault management for Oracle data files. A security vulnerability exists in Oracle Applications Manager View Reports 12.1.3, 12.2.3-12.2.10, which allows a highly...

6.5CVSS5.6AI score0.00968EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/02/08 12:00 a.m.•55 views

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2022-09274)

ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. Zoho ManageEngine Applications Manager through 14930 is vulnerable to SQL injection, which can be exploited to perform an authenticated SQL injection into showresource.do via the resourceid parameter...

8.8CVSS3.5AI score0.27348EPSS
SaveExploits1References1
OSV
OSV
•added 2021/02/05 2:15 p.m.•18 views

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

8.8CVSS7.4AI score0.27348EPSS
SaveExploits1References4
NVD
NVD
•added 2021/02/05 2:15 p.m.•30 views

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

8.8CVSS0.27348EPSS
SaveExploits1References4
Prion
Prion
•added 2021/02/05 2:15 p.m.•25 views

Sql injection

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

6.5CVSS8.9AI score0.27348EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2021/02/05 8:55 a.m.•77 views

CVE-2020-35765

CVE-2020-35765 affects Zoho ManageEngine Applications Manager up to version 14930, where doFilter in com.adventnet.appmanager.filter.UriCollector enables an authenticated SQL injection via the resourceid parameter to showresource.do. The issue is caused by improper handling in UriCollector used d...

8.8CVSS8.9AI score0.27348EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/02/05 8:55 a.m.•36 views

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

9AI score0.27348EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/02/05 12:00 a.m.•5 views

PT-2021-11855

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions through 14930 Description: The issue allows an authenticated SQL Injection via the resourceid parameter to "showresource.do". This affects the doFilter function in...

8.8CVSS5.6AI score0.27348EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/05 12:00 a.m.•8 views

CVE-2020-35765: Improper Neutralization of Special Elements used in an SQL Command

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

8.8CVSS5.8AI score0.27348EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2021/01/26 12:00 a.m.•10 views

Zoho ManageEngine Applications Manager SQL Injection

A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input when processing the request in getAssociateMonitors method...

4.7AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/25 12:00 a.m.•37 views

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2021-06863)

ZOHO ManageEngine Applications Manager is a suite of IT operations management solutions from ZOHO USA. A security vulnerability exists in ZOHO ManageEngine Applications Manager Alarmview, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, obtain...

8.8CVSS7.7AI score0.08814EPSS
SaveExploits0References1
OSV
OSV
•added 2021/01/19 4:15 p.m.•13 views

CVE-2020-27733

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request...

8.8CVSS7.4AI score0.08814EPSS
SaveExploits0References2
Prion
Prion
•added 2021/01/19 4:15 p.m.•22 views

Sql injection

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request...

6.5CVSS8.8AI score0.08814EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/01/19 3:53 p.m.•41 views

CVE-2020-27733

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request...

8.9AI score0.08814EPSS
SaveExploits0References2
CVE
CVE
•added 2021/01/19 3:53 p.m.•70 views

CVE-2020-27733

CVE-2020-27733 affects Zoho ManageEngine Applications Manager prior to version 14 build 14880. The vulnerability is an authenticated SQL Injection in the Alarmview endpoint, exploitable by crafting a malicious Alarmview request. Impact per sources: potential database manipulation, information dis...

8.8CVSS8.8AI score0.08814EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder