// For flags

CVE-2020-27995

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

Una inyección SQL en Zoho ManageEngine Applications Manager 14 versiones anteriores a 14560, permite a un atacante ejecutar comandos en el servidor por medio del parámetro template_resid del archivo MyPage.do

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-10-29 CVE Reserved
  • 2020-10-29 CVE Published
  • 2024-08-04 CVE Updated
  • 2024-11-22 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14000
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14010
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14020
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14030
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14040
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14050
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14060
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14070
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14071
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14072
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14073
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14080
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14090
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14100
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14110
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14120
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14130
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14140
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14150
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14160
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14170
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14180
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14190
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14200
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14210
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14220
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14230
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14240
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14250
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14260
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14261
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14262
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14270
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14280
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14290
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14300
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14310
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14330
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14331
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14332
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14340
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14350
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14360
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14361
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14370
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14380
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14390
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14400
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14401
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14410
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14420
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14430
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14440
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14450
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14460
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14470
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14480
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14490
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14500
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14510
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14520
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14530
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14531
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14532
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14533
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14540
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Applications Manager
Search vendor "Zohocorp" for product "Manageengine Applications Manager"
14.0
Search vendor "Zohocorp" for product "Manageengine Applications Manager" and version "14.0"
build14550
Affected