PT-2021-11414
CVE-2020-27733
·
تاريخ النشر
2021-01-19
·
تاريخ التحديث
2022-10-07
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Zoho ManageEngine Applications Manager versions prior to 14 build 14880
Description:
The issue allows an authenticated SQL Injection via a crafted Alarmview request. This can potentially be exploited by sending a malicious request to the affected system.
Recommendations:
For versions prior to 14 build 14880, update to a version 14 build 14880 or later to resolve the issue.
As a temporary workaround, consider restricting access to the Alarmview request to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾