CVE-2020-14008

Exploit

EPSS 45.04%
Veröffentlicht 04.09.2020 15:15:10
Zuletzt bearbeitet 21.11.2024 05:02:20
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zohocorp ≫ Manageengine Applications Manager Version <= 13.0

Zohocorp ≫ Manageengine Applications Manager Version14.0 Update-

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14000

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14010

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14020

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14030

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14040

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14050

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14060

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14070

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14071

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14072

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14073

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14080

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14090

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14100

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14110

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14120

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14130

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14140

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14150

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14160

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14170

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14180

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14190

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14200

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14210

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14220

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14230

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14240

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14250

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14260

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14261

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14262

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14270

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14280

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14290

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14300

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14310

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14330

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14331

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14332

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14340

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14350

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14360

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14361

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14370

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14380

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14390

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14400

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14401

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14410

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14420

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14430

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14440

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14450

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14460

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14470

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14480

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14490

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14500

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14510

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14520

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14530

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14531

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14532

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14533

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14540

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14550

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14560

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14570

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14580

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14590

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14600

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14610

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14620

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14630

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14660

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14670

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14681

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14682

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14683

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14684

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14685

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14690

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14700

Zohocorp ≫ Manageengine Applications Manager Version14.0 Updatebuild14710

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	45.04%	0.975

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://www.manageengine.com

Vendor Advisory

Product

http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html

Third Party Advisory

Exploit

VDB Entry

https://www.manageengine.com/products/applications_manager/issues.html#14730

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-14008

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-14008

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-14008

EUVD