CVE-2019-19800

zohocorp manageengine applications manager

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2019-19800

Katalog CVE

CVSS 5.3 · Medium EPSS 3,9%

Kerentanan Missing Authentication for Critical Function pada zohocorp manageengine applications manager. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.

Rincian

Terbit di NVD
6 Februari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-306: Missing Authentication for Critical Function
EPSS (30 hari)
3,9% peluang dieksploitasi; lebih tinggi dari 90,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine applications manager Versi 14.0
zohocorp manageengine applications manager Versi 14.0 build14000
zohocorp manageengine applications manager Versi 14.0 build14010
zohocorp manageengine applications manager Versi 14.0 build14020
zohocorp manageengine applications manager Versi 14.0 build14030
zohocorp manageengine applications manager Versi 14.0 build14040
zohocorp manageengine applications manager Versi 14.0 build14050
zohocorp manageengine applications manager Versi 14.0 build14060
zohocorp manageengine applications manager Versi 14.0 build14070
zohocorp manageengine applications manager Versi 14.0 build14071
zohocorp manageengine applications manager Versi 14.0 build14072
zohocorp manageengine applications manager Versi 14.0 build14073
zohocorp manageengine applications manager Versi 14.0 build14080
zohocorp manageengine applications manager Versi 14.0 build14090
zohocorp manageengine applications manager Versi 14.0 build14100
zohocorp manageengine applications manager Versi 14.0 build14110
zohocorp manageengine applications manager Versi 14.0 build14120
zohocorp manageengine applications manager Versi 14.0 build14130
zohocorp manageengine applications manager Versi 14.0 build14140
zohocorp manageengine applications manager Versi 14.0 build14150
zohocorp manageengine applications manager Versi 14.0 build14160
zohocorp manageengine applications manager Versi 14.0 build14170
zohocorp manageengine applications manager Versi 14.0 build14180
zohocorp manageengine applications manager Versi 14.0 build14190
zohocorp manageengine applications manager Versi 14.0 build14200
zohocorp manageengine applications manager Versi 14.0 build14210
zohocorp manageengine applications manager Versi 14.0 build14220
zohocorp manageengine applications manager Versi 14.0 build14230
zohocorp manageengine applications manager Versi 14.0 build14240
zohocorp manageengine applications manager Versi 14.0 build14250
zohocorp manageengine applications manager Versi 14.0 build14260
zohocorp manageengine applications manager Versi 14.0 build14261
zohocorp manageengine applications manager Versi 14.0 build14262
zohocorp manageengine applications manager Versi 14.0 build14270
zohocorp manageengine applications manager Versi 14.0 build14280
zohocorp manageengine applications manager Versi 14.0 build14290
zohocorp manageengine applications manager Versi 14.0 build14300
zohocorp manageengine applications manager Versi 14.0 build14310
zohocorp manageengine applications manager Versi 14.0 build14330
zohocorp manageengine applications manager Versi 14.0 build14331
zohocorp manageengine applications manager Versi 14.0 build14332
zohocorp manageengine applications manager Versi 14.0 build14340
zohocorp manageengine applications manager Versi 14.0 build14350
zohocorp manageengine applications manager Versi 14.0 build14360
zohocorp manageengine applications manager Versi 14.0 build14361
zohocorp manageengine applications manager Versi 14.0 build14370
zohocorp manageengine applications manager Versi 14.0 build14380
zohocorp manageengine applications manager Versi 14.0 build14390
zohocorp manageengine applications manager Versi 14.0 build14400
zohocorp manageengine applications manager Versi 14.0 build14401
zohocorp manageengine applications manager Versi 14.0 build14410
zohocorp manageengine applications manager Versi 14.0 build14420
zohocorp manageengine applications manager Versi 14.0 build14430
zohocorp manageengine applications manager Versi 14.0 build14440
zohocorp manageengine applications manager Versi 14.0 build14450
zohocorp manageengine applications manager Versi 14.0 build14460
zohocorp manageengine applications manager Versi 14.0 build14470
zohocorp manageengine applications manager Versi 14.0 build14480
zohocorp manageengine applications manager Versi 14.0 build14490
zohocorp manageengine applications manager Versi 14.0 build14500

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 61 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.