manageengine_applications_manager Archives - CVE Vulnerability

CVE-2020-35765

Sun, 26 Feb 2023 06:41:23 +0000

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do.

The post CVE-2020-35765 appeared first on CVE Vulnerability.

CVE-2020-28679

Sun, 26 Feb 2023 06:40:44 +0000

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.

The post CVE-2020-28679 appeared first on CVE Vulnerability.

CVE-2020-27995

Sun, 26 Feb 2023 06:40:32 +0000

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

The post CVE-2020-27995 appeared first on CVE Vulnerability.

CVE-2020-27733

Sun, 26 Feb 2023 06:40:25 +0000

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request.

The post CVE-2020-27733 appeared first on CVE Vulnerability.

CVE-2020-24743

Sun, 26 Feb 2023 06:39:32 +0000

An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter.

The post CVE-2020-24743 appeared first on CVE Vulnerability.

CVE-2020-16267

Sun, 26 Feb 2023 06:38:11 +0000

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module.

The post CVE-2020-16267 appeared first on CVE Vulnerability.

CVE-2020-15927

Sun, 26 Feb 2023 06:38:02 +0000

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module.

The post CVE-2020-15927 appeared first on CVE Vulnerability.

CVE-2020-15533

Sun, 26 Feb 2023 06:37:52 +0000

In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack.

The post CVE-2020-15533 appeared first on CVE Vulnerability.

CVE-2020-10816

Sun, 26 Feb 2023 06:35:58 +0000

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet.

The post CVE-2020-10816 appeared first on CVE Vulnerability.

CVE-2019-19800

Sun, 26 Feb 2023 06:32:12 +0000

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.

The post CVE-2019-19800 appeared first on CVE Vulnerability.