Total vulnerabilities in the database
Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.
| Software | From | Fixed in |
|---|---|---|
| manageengine / applications_manager | 10.2 | 10.2.x |
| manageengine / applications_manager | 10.3 | 10.3.x |
| manageengine / applications_manager | 10.1 | 10.1.x |
| manageengine / applications_manager | 10.0 | 10.0.x |
| manageengine / applications_manager | 9.2 | 9.2.x |
| manageengine / applications_manager | 9.4 | 9.4.x |
| manageengine / applications_manager | 9.1 | 9.1.x |
| manageengine / applications_manager | 9.3 | 9.3.x |
| manageengine / applications_manager | 9.5 | 9.5.x |