Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2020-24786

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build number 12136, ADAudit Plus before build number 6052, O365 Manager Plus before build number 4334, Cloud Security Plus before build number 4110, ADManager Plus before build number 7055, and Log360 before build number 5166. The remotely accessible Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails is prone to an authentication bypass. System integration properties can be modified and lead to full ManageEngine suite compromise.

  • Published: Aug 31, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-24786
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
zohocorp / manageengine_adselfservice_plus 5.8-5800 5.8-5800.x
zohocorp / manageengine_adselfservice_plus 5.8-5801 5.8-5801.x
zohocorp / manageengine_adselfservice_plus 5.8-5802 5.8-5802.x
zohocorp / manageengine_adselfservice_plus 5.8-5803 5.8-5803.x
zohocorp / manageengine_adselfservice_plus 5.8-5806 5.8-5806.x
zohocorp / manageengine_adselfservice_plus 5.8-5807 5.8-5807.x
zohocorp / manageengine_adselfservice_plus 5.8-5808 5.8-5808.x
zohocorp / manageengine_adselfservice_plus 5.8-5804 5.8-5804.x
zohocorp / manageengine_adselfservice_plus 5.8-5805 5.8-5805.x
zohocorp / manageengine_adselfservice_plus 5.8-5814 5.8-5814.x
zohocorp / manageengine_adselfservice_plus - 5.7.x
zohocorp / manageengine_adselfservice_plus 5.8 5.8.x
zohocorp / manageengine_adselfservice_plus 5.8-5809 5.8-5809.x
zohocorp / manageengine_adselfservice_plus 5.8-5810 5.8-5810.x
zohocorp / manageengine_adselfservice_plus 5.8-5811 5.8-5811.x
zohocorp / manageengine_adselfservice_plus 5.8-5812 5.8-5812.x
zohocorp / manageengine_adselfservice_plus 5.8-5813 5.8-5813.x
zohocorp / manageengine_adselfservice_plus 5.8-5815 5.8-5815.x
zohocorp / manageengine_adselfservice_plus 5.8-5816 5.8-5816.x
zohocorp / manageengine_exchange_reporter_plus - 5.4.x
zohocorp / manageengine_exchange_reporter_plus 5.5-5504 5.5-5504.x
zohocorp / manageengine_exchange_reporter_plus 5.5-5503 5.5-5503.x
zohocorp / manageengine_exchange_reporter_plus 5.5-5502 5.5-5502.x
zohocorp / manageengine_exchange_reporter_plus 5.5-5501 5.5-5501.x
zohocorp / manageengine_exchange_reporter_plus 5.5-5500 5.5-5500.x
zohocorp / manageengine_ad360 - 4.1.x
zohocorp / manageengine_ad360 4.2-4225 4.2-4225.x
zohocorp / manageengine_ad360 4.2-4224 4.2-4224.x
zohocorp / manageengine_ad360 4.2-4223 4.2-4223.x
zohocorp / manageengine_ad360 4.2-4222 4.2-4222.x
zohocorp / manageengine_ad360 4.2-4220 4.2-4220.x
zohocorp / manageengine_ad360 4.2-4219 4.2-4219.x
zohocorp / manageengine_ad360 4.2-4217 4.2-4217.x
zohocorp / manageengine_ad360 4.2-4216 4.2-4216.x
zohocorp / manageengine_ad360 4.2-4215 4.2-4215.x
zohocorp / manageengine_ad360 4.2-4214 4.2-4214.x
zohocorp / manageengine_ad360 4.2-4213 4.2-4213.x
zohocorp / manageengine_ad360 4.2-4212 4.2-4212.x
zohocorp / manageengine_ad360 4.2-4210 4.2-4210.x
zohocorp / manageengine_ad360 4.2-4209 4.2-4209.x
zohocorp / manageengine_ad360 4.2-4208 4.2-4208.x
zohocorp / manageengine_ad360 4.2-4207 4.2-4207.x
zohocorp / manageengine_ad360 4.2-4206 4.2-4206.x
zohocorp / manageengine_ad360 4.2-4205 4.2-4205.x
zohocorp / manageengine_ad360 4.2-4204 4.2-4204.x
zohocorp / manageengine_ad360 4.2-4203 4.2-4203.x
zohocorp / manageengine_ad360 4.2-4202 4.2-4202.x
zohocorp / manageengine_ad360 4.2-4201 4.2-4201.x
zohocorp / manageengine_ad360 4.2-4200 4.2-4200.x
zohocorp / manageengine_ad360 4.2-4227 4.2-4227.x
zohocorp / manageengine_datasecurity_plus - 5.0.x
zohocorp / manageengine_datasecurity_plus 6.0-6003 6.0-6003.x
zohocorp / manageengine_datasecurity_plus 6.0-6010 6.0-6010.x
zohocorp / manageengine_datasecurity_plus 6.0-6011 6.0-6011.x
zohocorp / manageengine_datasecurity_plus 6.0-6012 6.0-6012.x
zohocorp / manageengine_datasecurity_plus 6.0-6013 6.0-6013.x
zohocorp / manageengine_datasecurity_plus 6.0-6020 6.0-6020.x
zohocorp / manageengine_datasecurity_plus 6.0-6021 6.0-6021.x
zohocorp / manageengine_datasecurity_plus 6.0-6030 6.0-6030.x
zohocorp / manageengine_datasecurity_plus 6.0-6031 6.0-6031.x
zohocorp / manageengine_datasecurity_plus 6.0-6032 6.0-6032.x
zohocorp / manageengine_datasecurity_plus 6.0-6000 6.0-6000.x
zohocorp / manageengine_datasecurity_plus 6.0-6001 6.0-6001.x
zohocorp / manageengine_datasecurity_plus 6.0-6002 6.0-6002.x
zohocorp / manageengine_recovermanager_plus - 5.4.x
zohocorp / manageengine_recovermanager_plus 6.0-6016 6.0-6016.x
zohocorp / manageengine_recovermanager_plus 6.0-6011 6.0-6011.x
zohocorp / manageengine_recovermanager_plus 6.0-6005 6.0-6005.x
zohocorp / manageengine_recovermanager_plus 6.0-6003 6.0-6003.x
zohocorp / manageengine_recovermanager_plus 6.0-6001 6.0-6001.x
zohocorp / manageengine_eventlog_analyzer 12.1.3-12135 12.1.3-12135.x
zohocorp / manageengine_eventlog_analyzer 12.1.3-12130 12.1.3-12130.x
zohocorp / manageengine_eventlog_analyzer - 12.1.2.x
zohocorp / manageengine_adaudit_plus - 5.1.x
zohocorp / manageengine_adaudit_plus 6.0-6033 6.0-6033.x
zohocorp / manageengine_adaudit_plus 6.0-6032 6.0-6032.x
zohocorp / manageengine_adaudit_plus 6.0-6031 6.0-6031.x
zohocorp / manageengine_adaudit_plus 6.0-6030 6.0-6030.x
zohocorp / manageengine_adaudit_plus 6.0-6010 6.0-6010.x
zohocorp / manageengine_adaudit_plus 6.0-6003 6.0-6003.x
zohocorp / manageengine_adaudit_plus 6.0-6002 6.0-6002.x
zohocorp / manageengine_adaudit_plus 6.0-6001 6.0-6001.x
zohocorp / manageengine_adaudit_plus 6.0-6000 6.0-6000.x
zohocorp / manageengine_adaudit_plus 6.0-6050 6.0-6050.x
zohocorp / manageengine_adaudit_plus 6.0-6052 6.0-6052.x
zohocorp / manageengine_o365_manager_plus 4.3-4333 4.3-4333.x
zohocorp / manageengine_o365_manager_plus 4.3-4332 4.3-4332.x
zohocorp / manageengine_o365_manager_plus 4.3-4331 4.3-4331.x
zohocorp / manageengine_o365_manager_plus 4.3-4330 4.3-4330.x
zohocorp / manageengine_o365_manager_plus 4.3-4329 4.3-4329.x
zohocorp / manageengine_o365_manager_plus 4.3-4328 4.3-4328.x
zohocorp / manageengine_o365_manager_plus 4.3-4327 4.3-4327.x
zohocorp / manageengine_o365_manager_plus 4.3-4325 4.3-4325.x
zohocorp / manageengine_o365_manager_plus 4.3-4324 4.3-4324.x
zohocorp / manageengine_o365_manager_plus 4.3-4322 4.3-4322.x
zohocorp / manageengine_o365_manager_plus 4.3-4321 4.3-4321.x
zohocorp / manageengine_o365_manager_plus 4.3-4320 4.3-4320.x
zohocorp / manageengine_o365_manager_plus 4.3-4319 4.3-4319.x
zohocorp / manageengine_o365_manager_plus 4.3-4318 4.3-4318.x
zohocorp / manageengine_o365_manager_plus 4.3-4317 4.3-4317.x
zohocorp / manageengine_o365_manager_plus 4.3-4316 4.3-4316.x
zohocorp / manageengine_o365_manager_plus 4.3-4312 4.3-4312.x
zohocorp / manageengine_o365_manager_plus 4.3-4311 4.3-4311.x
zohocorp / manageengine_o365_manager_plus 4.3-4310 4.3-4310.x
zohocorp / manageengine_o365_manager_plus 4.3-4309 4.3-4309.x
zohocorp / manageengine_o365_manager_plus 4.3-4308 4.3-4308.x
zohocorp / manageengine_o365_manager_plus 4.3-4306 4.3-4306.x
zohocorp / manageengine_o365_manager_plus 4.3-4305 4.3-4305.x
zohocorp / manageengine_o365_manager_plus 4.3-4304 4.3-4304.x
zohocorp / manageengine_o365_manager_plus 4.3-4303 4.3-4303.x
zohocorp / manageengine_o365_manager_plus 4.3-4302 4.3-4302.x
zohocorp / manageengine_o365_manager_plus 4.3-4301 4.3-4301.x
zohocorp / manageengine_o365_manager_plus 4.3-4300 4.3-4300.x
zohocorp / manageengine_o365_manager_plus 4.3-4334 4.3-4334.x
zohocorp / manageengine_o365_manager_plus - 4.2.x
zohocorp / manageengine_cloud_security_plus - 4.0.x
zohocorp / manageengine_cloud_security_plus 4.1-4109 4.1-4109.x
zohocorp / manageengine_cloud_security_plus 4.1-4108 4.1-4108.x
zohocorp / manageengine_cloud_security_plus 4.1-4107 4.1-4107.x
zohocorp / manageengine_cloud_security_plus 4.1-4106 4.1-4106.x
zohocorp / manageengine_cloud_security_plus 4.1-4105 4.1-4105.x
zohocorp / manageengine_cloud_security_plus 4.1-4104 4.1-4104.x
zohocorp / manageengine_cloud_security_plus 4.1-4103 4.1-4103.x
zohocorp / manageengine_cloud_security_plus 4.1-4102 4.1-4102.x
zohocorp / manageengine_cloud_security_plus 4.1-4101 4.1-4101.x
zohocorp / manageengine_cloud_security_plus 4.1-4100 4.1-4100.x
zohocorp / manageengine_admanager_plus - 6.6.x
zohocorp / manageengine_admanager_plus 7.0-7054 7.0-7054.x
zohocorp / manageengine_admanager_plus 7.0-7053 7.0-7053.x
zohocorp / manageengine_admanager_plus 7.0-7052 7.0-7052.x
zohocorp / manageengine_admanager_plus 7.0-7051 7.0-7051.x
zohocorp / manageengine_admanager_plus 7.0-7050 7.0-7050.x
zohocorp / manageengine_admanager_plus 7.0-7041 7.0-7041.x
zohocorp / manageengine_admanager_plus 7.0-7040 7.0-7040.x
zohocorp / manageengine_admanager_plus 7.0-7030 7.0-7030.x
zohocorp / manageengine_admanager_plus 7.0-7020 7.0-7020.x
zohocorp / manageengine_admanager_plus 7.0-7011 7.0-7011.x
zohocorp / manageengine_admanager_plus 7.0-7010 7.0-7010.x
zohocorp / manageengine_admanager_plus 7.0-7000 7.0-7000.x
zohocorp / manageengine_log360 - 5.0.x
zohocorp / manageengine_log360 5.1-5164 5.1-5164.x
zohocorp / manageengine_log360 5.1-5160 5.1-5160.x
zohocorp / manageengine_log360 5.1-5155 5.1-5155.x
zohocorp / manageengine_log360 5.1-5154 5.1-5154.x
zohocorp / manageengine_log360 5.1-5150 5.1-5150.x
zohocorp / manageengine_log360 5.1-5120 5.1-5120.x
zohocorp / manageengine_log360 5.1-5111 5.1-5111.x
zohocorp / manageengine_log360 5.1-5110 5.1-5110.x
zohocorp / manageengine_log360 5.1-5108 5.1-5108.x
zohocorp / manageengine_log360 5.1-5107 5.1-5107.x
zohocorp / manageengine_log360 5.1-5102 5.1-5102.x
zohocorp / manageengine_log360 5.1-5100 5.1-5100.x