8.8

CVE-2020-27733

Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update -
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14000
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14010
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14020
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14030
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14040
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14050
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14060
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14070
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14071
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14072
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14073
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14080
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14090
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14100
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14110
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14120
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14130
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14140
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14150
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14160
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14170
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14180
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14190
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14200
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14210
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14220
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14230
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14240
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14250
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14260
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14261
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14262
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14270
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14280
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14290
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14300
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14310
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14330
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14331
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14332
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14340
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14350
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14360
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14361
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14370
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14380
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14390
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14400
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14401
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14410
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14420
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14430
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14440
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14450
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14460
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14470
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14480
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14490
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14500
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14510
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14520
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14530
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14531
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14532
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14533
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14540
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14550
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14560
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14570
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14580
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14590
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14600
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14610
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14620
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14630
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14660
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14670
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14681
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14682
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14683
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14684
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14685
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14690
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14700
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14710
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14720
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14730
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14740
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14750
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14760
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14770
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14780
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14781
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14790
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14800
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14811
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14820
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14830
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14840
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14841
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14842
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14843
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14850
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14860
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14870
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.81% 0.945
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

https://www.manageengine.com/products/applications_manager/issues.html#v14880
Vendor Advisory
Release Notes
Issue Tracking
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-27733.html
Vendor Advisory
Release Notes