PT-2021-11414 · Zoho · Zoho Manageengine Applications Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions prior to 14 build 14880 Description: The issue allows an authenticated SQL Injection via a crafted Alarmview request. This can potentially be exploited by sending a malicious request to the...

CVE-2020-27733: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request...

ZOHO ManageEngine Applications Manager SQL注入漏洞

ZOHO ManageEngine Applications Manager is a suite of IT operations management solutions from ZOHO USA. A security vulnerability exists in ZOHO ManageEngine Applications Manager Alarmview, which can be exploited by remote attackers to submit a special SQL request to manipulate the database, obtain...

The vulnerability of the Zoho ManageEngine Applications Manager software lies in its lack of protection against SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Zoho ManageEngine Applications Manager software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the created JSP query within the SAP module...

ManageEngine Applications Manager REST API SQLi

The remote host is running a version of ManageEngine Applications Manager that is affected by a SQL injection vulnerability due to improper validation of user-supplied input to the 'APIServlet' servlet. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP message to...

Zoho ManageEngine Applications Manager SQL Injection (CVE-2020-27995)

A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input in processing MyPage.do action...

Zoho ManageEngine Applications Manager Arbitrary File Upload (CVE-2020-14008)

An arbitrary file upload vulnerability exists in Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user supplied data in UploadAction. Successful exploitation could result in uploading potentially dangerous file which may lead to arbitrary code execution...

The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the SQL Extensions component of the Oracle Applications Manager system’s application management tool allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the SQL Extensions component of the Oracle Applications Manager, a tool for managing Oracle Applications, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the...

The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-60827)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

Sql injection

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

CVE-2020-27995 affects Zoho ManageEngine Applications Manager 14.x prior to 14560. The vulnerability is an SQL injection in the MyPage.do action that allows an attacker to execute commands on the server via the template_resid parameter, caused by improper validation of user-supplied input. Impact...

CVE-2020-27995: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

PT-2020-16897

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 14 before 14560 Description The issue allows an attacker to execute commands on the server. This is achieved via the template resid parameter in the "MyPage.do" endpoint. Recommendations For Zoho...

Oracle Applications Manager Unauthorized Access Vulnerability

Oracle Applications Manager is an application management software from Oracle. The software provides monitoring, trending, and fault management for Oracle data files. A security vulnerability exists in Oracle Applications Manager that can be exploited by an attacker to compromise Oracle...

CVE-2020-14826

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: SQL Extensions. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...