7.2

CVE-2020-14008

Exploit
Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update -
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14000
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14010
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14020
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14030
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14040
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14050
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14060
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14070
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14071
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14072
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14073
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14080
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14090
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14100
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14110
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14120
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14130
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14140
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14150
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14160
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14170
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14180
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14190
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14200
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14210
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14220
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14230
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14240
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14250
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14260
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14261
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14262
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14270
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14280
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14290
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14300
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14310
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14330
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14331
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14332
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14340
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14350
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14360
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14361
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14370
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14380
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14390
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14400
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14401
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14410
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14420
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14430
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14440
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14450
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14460
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14470
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14480
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14490
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14500
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14510
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14520
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14530
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14531
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14532
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14533
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14540
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14550
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14560
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14570
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14580
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14590
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14600
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14610
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14620
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14630
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14660
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14670
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14681
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14682
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14683
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14684
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14685
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14690
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14700
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14710
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 40.06% 0.985
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://www.manageengine.com
Vendor Advisory
Product
http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
Third Party Advisory
Exploit
VDB Entry
https://www.manageengine.com/products/applications_manager/issues.html#14730
Vendor Advisory