CVE-2020-15533 - In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack

Back Back to CVE browser

CRITICAL

In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack

Published Oct 1, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 4.20%

Description

In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7520
Advisory
https://www.manageengine.com
x_refsource_MISCVendor Advisory
https://www.manageengine.com/products/applications_manager/issues.html#v14750
x_refsource_CONFIRMRelease NotesVendor Advisory
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15533.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7520		Advisory
https://www.manageengine.com		x_refsource_MISCVendor Advisory
https://www.manageengine.com/products/applications_manager/issues.html#v14750		x_refsource_CONFIRMRelease NotesVendor Advisory
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15533.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 1, 2020

Updated Aug 4, 2024

Reserved Jul 5, 2020

Link CVE-2020-15533

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-15533

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 1, 2020

Updated Aug 4, 2024

Link EUVD-2020-7520

GitHub

No data