CPE Details
ZohoCorp ManageEngine Applications Manager 14.5
14.5
2020-03-26
15h32 +00:00
15h32 +00:00
2020-03-26
15h32 +00:00
15h32 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:zohocorp:manageengine_applications_manager:14.5:-:*:*:*:*:*:*
Informations
Vendor
zohocorpProduct
manageengine_applications_managerVersion
14.5Update
-Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature. | 4.7 |
Medium |
||
| Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in. | 6.1 |
Medium |
||
| Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS. | 6.1 |
Medium |
||
| Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack. | 6.5 |
Medium |
||
| An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter. | 9.8 |
Critical |
||
| Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD. | 5.4 |
Medium |
||
| doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do. | 8.8 |
High |
||
| In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack. | 9.8 |
Critical |
||
| Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet. | 5.3 |
Medium |
