CVE-2020-27995: zohocorp manageengine applications manager

csirt@kutim:~/threat-intel/cve/CVE-2020-27995

CVSS 9.8 · Critical EPSS 8,8%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada zohocorp manageengine applications manager. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

Rincian

Terbit di NVD: 29 Oktober 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
EPSS (30 hari): 8,8% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
zohocorp	manageengine applications manager	Versi 14.0
zohocorp	manageengine applications manager	Versi 14.0 build14000
zohocorp	manageengine applications manager	Versi 14.0 build14010
zohocorp	manageengine applications manager	Versi 14.0 build14020
zohocorp	manageengine applications manager	Versi 14.0 build14030
zohocorp	manageengine applications manager	Versi 14.0 build14040
zohocorp	manageengine applications manager	Versi 14.0 build14050
zohocorp	manageengine applications manager	Versi 14.0 build14060
zohocorp	manageengine applications manager	Versi 14.0 build14070
zohocorp	manageengine applications manager	Versi 14.0 build14071
zohocorp	manageengine applications manager	Versi 14.0 build14072
zohocorp	manageengine applications manager	Versi 14.0 build14073
zohocorp	manageengine applications manager	Versi 14.0 build14080
zohocorp	manageengine applications manager	Versi 14.0 build14090
zohocorp	manageengine applications manager	Versi 14.0 build14100
zohocorp	manageengine applications manager	Versi 14.0 build14110
zohocorp	manageengine applications manager	Versi 14.0 build14120
zohocorp	manageengine applications manager	Versi 14.0 build14130
zohocorp	manageengine applications manager	Versi 14.0 build14140
zohocorp	manageengine applications manager	Versi 14.0 build14150
zohocorp	manageengine applications manager	Versi 14.0 build14160
zohocorp	manageengine applications manager	Versi 14.0 build14170
zohocorp	manageengine applications manager	Versi 14.0 build14180
zohocorp	manageengine applications manager	Versi 14.0 build14190
zohocorp	manageengine applications manager	Versi 14.0 build14200
zohocorp	manageengine applications manager	Versi 14.0 build14210
zohocorp	manageengine applications manager	Versi 14.0 build14220
zohocorp	manageengine applications manager	Versi 14.0 build14230
zohocorp	manageengine applications manager	Versi 14.0 build14240
zohocorp	manageengine applications manager	Versi 14.0 build14250
zohocorp	manageengine applications manager	Versi 14.0 build14260
zohocorp	manageengine applications manager	Versi 14.0 build14261
zohocorp	manageengine applications manager	Versi 14.0 build14262
zohocorp	manageengine applications manager	Versi 14.0 build14270
zohocorp	manageengine applications manager	Versi 14.0 build14280
zohocorp	manageengine applications manager	Versi 14.0 build14290
zohocorp	manageengine applications manager	Versi 14.0 build14300
zohocorp	manageengine applications manager	Versi 14.0 build14310
zohocorp	manageengine applications manager	Versi 14.0 build14330
zohocorp	manageengine applications manager	Versi 14.0 build14331
zohocorp	manageengine applications manager	Versi 14.0 build14332
zohocorp	manageengine applications manager	Versi 14.0 build14340
zohocorp	manageengine applications manager	Versi 14.0 build14350
zohocorp	manageengine applications manager	Versi 14.0 build14360
zohocorp	manageengine applications manager	Versi 14.0 build14361
zohocorp	manageengine applications manager	Versi 14.0 build14370
zohocorp	manageengine applications manager	Versi 14.0 build14380
zohocorp	manageengine applications manager	Versi 14.0 build14390
zohocorp	manageengine applications manager	Versi 14.0 build14400
zohocorp	manageengine applications manager	Versi 14.0 build14401
zohocorp	manageengine applications manager	Versi 14.0 build14410
zohocorp	manageengine applications manager	Versi 14.0 build14420
zohocorp	manageengine applications manager	Versi 14.0 build14430
zohocorp	manageengine applications manager	Versi 14.0 build14440
zohocorp	manageengine applications manager	Versi 14.0 build14450
zohocorp	manageengine applications manager	Versi 14.0 build14460
zohocorp	manageengine applications manager	Versi 14.0 build14470
zohocorp	manageengine applications manager	Versi 14.0 build14480
zohocorp	manageengine applications manager	Versi 14.0 build14490
zohocorp	manageengine applications manager	Versi 14.0 build14500

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 68 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://www.manageengine.com/products/applications_manager/issues.html#v14560 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.