CVE-2020-15927

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 14740 and prior

Description The issue is related to a lack of protection against SQL query structure exploitation in the Zoho ManageEngine Applications Manager. This can be exploited by a remote attacker using a crafted jsp request in the SAP module, allowing the execution of arbitrary SQL queries.

Recommendations For Zoho ManageEngine Applications Manager version 14740 and prior, update to a version later than 14740 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.