8.8

CVE-2020-28679

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Applications Manager Version 11.0 Update build11010
Zohocorp ≫ Manageengine Applications Manager Version 11.0 Update build11020
Zohocorp ≫ Manageengine Applications Manager Version 11.0 Update build11030
Zohocorp ≫ Manageengine Applications Manager Version 11.0 Update build11040
Zohocorp ≫ Manageengine Applications Manager Version 11.0 Update build11100
Zohocorp ≫ Manageengine Applications Manager Version 11.1 Update build11110
Zohocorp ≫ Manageengine Applications Manager Version 11.2 Update build11200
Zohocorp ≫ Manageengine Applications Manager Version 11.2 Update build11210
Zohocorp ≫ Manageengine Applications Manager Version 11.2 Update build11220
Zohocorp ≫ Manageengine Applications Manager Version 11.3 Update build11300
Zohocorp ≫ Manageengine Applications Manager Version 11.4 Update build11410
Zohocorp ≫ Manageengine Applications Manager Version 11.5 Update build11520
Zohocorp ≫ Manageengine Applications Manager Version 11.6 Update build11610
Zohocorp ≫ Manageengine Applications Manager Version 11.7 Update build11700
Zohocorp ≫ Manageengine Applications Manager Version 11.8 Update build11800
Zohocorp ≫ Manageengine Applications Manager Version 11.9 Update build11900
Zohocorp ≫ Manageengine Applications Manager Version 11.9 Update build11912
Zohocorp ≫ Manageengine Applications Manager Version 12.0 Update build12000
Zohocorp ≫ Manageengine Applications Manager Version 12.0 Update build12010
Zohocorp ≫ Manageengine Applications Manager Version 12.0 Update build12020
Zohocorp ≫ Manageengine Applications Manager Version 12.1 Update build12100
Zohocorp ≫ Manageengine Applications Manager Version 12.1 Update build12120
Zohocorp ≫ Manageengine Applications Manager Version 12.2 Update build12200
Zohocorp ≫ Manageengine Applications Manager Version 12.2 Update build12210
Zohocorp ≫ Manageengine Applications Manager Version 12.3 Update build12300
Zohocorp ≫ Manageengine Applications Manager Version 12.5 Update build12500
Zohocorp ≫ Manageengine Applications Manager Version 12.6 Update build12600
Zohocorp ≫ Manageengine Applications Manager Version 12.7 Update build12700
Zohocorp ≫ Manageengine Applications Manager Version 12.7 Update build12710
Zohocorp ≫ Manageengine Applications Manager Version 12.8 Update build12810
Zohocorp ≫ Manageengine Applications Manager Version 12.9 Update build12900
Zohocorp ≫ Manageengine Applications Manager Version 13.0 Update build13000
Zohocorp ≫ Manageengine Applications Manager Version 13.1 Update build13100
Zohocorp ≫ Manageengine Applications Manager Version 13.2 Update build13200
Zohocorp ≫ Manageengine Applications Manager Version 13.2 Update build13210
Zohocorp ≫ Manageengine Applications Manager Version 13.3 Update build13300
Zohocorp ≫ Manageengine Applications Manager Version 13.4 Update build13400
Zohocorp ≫ Manageengine Applications Manager Version 13.4 Update build13410
Zohocorp ≫ Manageengine Applications Manager Version 13.4 Update build13420
Zohocorp ≫ Manageengine Applications Manager Version 13.4 Update build13430
Zohocorp ≫ Manageengine Applications Manager Version 13.4 Update build13440
Zohocorp ≫ Manageengine Applications Manager Version 13.4 Update build13450
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13500
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13510
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13520
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13530
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13540
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13550
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13560
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13570
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13580
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13590
Zohocorp ≫ Manageengine Applications Manager Version 13.5 Update build13591
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13600
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13610
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13620
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13630
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13640
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13650
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13660
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13670
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13680
Zohocorp ≫ Manageengine Applications Manager Version 13.6 Update build13690
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13700
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13710
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13720
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13730
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13740
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13750
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13760
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13770
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13780
Zohocorp ≫ Manageengine Applications Manager Version 13.7 Update build13790
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13800
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13810
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13820
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13830
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13831
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13840
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13850
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13860
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13870
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13880
Zohocorp ≫ Manageengine Applications Manager Version 13.8 Update build13890
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13900
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13910
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13920
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13930
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13940
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13950
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13960
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13970
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13980
Zohocorp ≫ Manageengine Applications Manager Version 13.9 Update build13990
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14000
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14010
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14020
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14030
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14040
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14050
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14060
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14070
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14071
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14072
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14073
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14080
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14090
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14100
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14110
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14120
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14130
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14140
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14150
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14160
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14170
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14180
Zohocorp ≫ Manageengine Applications Manager Version 14.1 Update build14190
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14200
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14210
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14220
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14230
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14240
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14250
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14260
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14261
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14262
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14270
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14280
Zohocorp ≫ Manageengine Applications Manager Version 14.2 Update build14290
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14300
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14310
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14330
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14331
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14332
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14340
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14350
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14360
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14361
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14370
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14380
Zohocorp ≫ Manageengine Applications Manager Version 14.3 Update build14390
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14400
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14401
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14410
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14420
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14430
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14440
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14450
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14460
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14470
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14480
Zohocorp ≫ Manageengine Applications Manager Version 14.4 Update build14490
Zohocorp ≫ Manageengine Applications Manager Version 14.5 Update build14500
Zohocorp ≫ Manageengine Applications Manager Version 14.5 Update build14510
Zohocorp ≫ Manageengine Applications Manager Version 14.5 Update build14520
Zohocorp ≫ Manageengine Applications Manager Version 14.5 Update build14530
Zohocorp ≫ Manageengine Applications Manager Version 14.5 Update build14540
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.53% 0.829
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

https://www.manageengine.com/products/applications_manager/issues.html#v14550
Vendor Advisory
Release Notes