CVE-2020-15394

2020-09-2506:11:41

mitre

www.cve.org

zoho manageengine

applications manager

rest api

sql injection

remote code execution

AI Score

Confidence

High

EPSS

0.007

Percentile

80.1%

JSON

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution.

References

www.manageengine.com

www.manageengine.com/products/applications_manager/issues.html#v14740

www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15394.html