CVE-2019-19650

2019-12-1117:40:20

mitre

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.004

Percentile

73.5%

JSON

Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function.

References

gitlab.com/eLeN3Re/CVE-2019-19650

www.manageengine.com/products/applications_manager/release-notes.html