CVE-2018-13050

2018-07-0211:00:00

mitre

www.cve.org

AI Score

9.9

Confidence

High

EPSS

0.002

Percentile

57.1%

JSON

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_security_check POST request.

References

github.com/x-f1v3/ForCve/issues/1

www.manageengine.com/products/applications_manager/issues.html

www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-13050.html