CVE-2020-35765 | SynScan

Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do.

Published: Feb 5, 2021
Updated: Apr 14, 2023
CVE: CVE-2020-35765
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Medium
Score: 6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_applications_manager	14.9-build14900	14.9-build14900.x
zohocorp / manageengine_applications_manager	14.9-build14910	14.9-build14910.x
zohocorp / manageengine_applications_manager	14.9-build14911	14.9-build14911.x
zohocorp / manageengine_applications_manager	14.9-build14930	14.9-build14930.x
zohocorp / manageengine_applications_manager	14.9	14.9.x
zohocorp / manageengine_applications_manager	-	14.9