CVE-2020-27733

CWE-89 — SQL Injection3 documents3 sources

Severity

8.8HIGH

EPSS

4.4%

top 11.05%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Zohocorp Manageengine Applications Manager

Timeline

PublishedJan 19

Latest updateMay 24

Description

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDzohocorp/manageengine_applications_manager14.0

🔴Vulnerability Details

GHSA

GHSA-5m2p-g5x2-c2rf: Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request↗2022-05-24

▶

CVEList

CVE-2020-27733: Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request↗2021-01-19

▶