CVE-2018-15168

2018-08-0800:00:00

mitre

www.cve.org

AI Score

9.9

Confidence

High

EPSS

0.002

Percentile

52.1%

JSON

A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request.

References

github.com/x-f1v3/ForCve/issues/2

www.manageengine.com/products/applications_manager/issues.html

www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-15168.html