CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

CVE-2020-15927

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

Sql injection

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

CVE-2020-15927: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

PT-2020-5327

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 14740 and prior Description The issue is related to a lack of protection against SQL query structure exploitation in the Zoho ManageEngine Applications Manager. This can be exploited by a remote...

CVE-2020-16267: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...