by Kastro
Paper/Archive/CVE-2020-15533

CVE-2020-15533

mitre — In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vuln…

EPSS 4%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 91.0.910 × 2018.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmanageengine.comrefmanageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15533.htmlrefmanageengine.com/products/applications_manager/issues.html#v14750