PT-2019-13986

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Application Manager versions through 14.2 Description A SQL Injection issue exists in the jsp/NewThresholdConfiguration.jsp file via the resourceid parameter, allowing a low-authority user to gain SYSTEM authority on the...

CVE-2019-15104: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-authority user can gain the authority of SYSTEM on the server. One can consequently upload a malicious...

PT-2019-13985

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.5 Description A SQL Injection issue exists in the jsp/NewThresholdConfiguration.jsp file via the resourceid parameter, allowing a low-authority user to gain SYSTEM authority on the server. This...

CVE-2019-15105: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-authority user can gain the authority of SYSTEM on the server. One can consequently upload a...