CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-6036

Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows remote attackers or remote authenticated users to delete arbitrary files via a .. (dot dot) in the fileName parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.365

EPSS Ranking 96.9%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2014-6036

Zohocorp » Manageengine It360 » Version: N/A

cpe:2.3:a:zohocorp:manageengine_it360:-
Zohocorp » Manageengine It360 » Version: 10.3

cpe:2.3:a:zohocorp:manageengine_it360:10.3
Zohocorp » Manageengine It360 » Version: 10.3.0

cpe:2.3:a:zohocorp:manageengine_it360:10.3.0
Zohocorp » Manageengine It360 » Version: 10.3.3

cpe:2.3:a:zohocorp:manageengine_it360:10.3.3
Zohocorp » Manageengine It360 » Version: 8.4.0

cpe:2.3:a:zohocorp:manageengine_it360:8.4.0
Zohocorp » Manageengine It360 » Version: 8.5.0

cpe:2.3:a:zohocorp:manageengine_it360:8.5.0
Zohocorp » Manageengine It360 » Version: 8.5.1

cpe:2.3:a:zohocorp:manageengine_it360:8.5.1
Zohocorp » Manageengine It360 » Version: 8.5.2

cpe:2.3:a:zohocorp:manageengine_it360:8.5.2
Zohocorp » Manageengine It360 » Version: 8.5.3

cpe:2.3:a:zohocorp:manageengine_it360:8.5.3
Zohocorp » Manageengine It360 » Version: 8.5.4

cpe:2.3:a:zohocorp:manageengine_it360:8.5.4
Zohocorp » Manageengine It360 » Version: 8.5.5

cpe:2.3:a:zohocorp:manageengine_it360:8.5.5
Zohocorp » Manageengine It360 » Version: 9.0.0

cpe:2.3:a:zohocorp:manageengine_it360:9.0.0
Zohocorp » Manageengine It360 » Version: 9.0.1

cpe:2.3:a:zohocorp:manageengine_it360:9.0.1
Zohocorp » Manageengine It360 » Version: 9.0.2

cpe:2.3:a:zohocorp:manageengine_it360:9.0.2
Zohocorp » Manageengine It360 » Version: 9.0.3

cpe:2.3:a:zohocorp:manageengine_it360:9.0.3
Zohocorp » Manageengine It360 » Version: 9.0.4

cpe:2.3:a:zohocorp:manageengine_it360:9.0.4
Zohocorp » Manageengine It360 » Version: 9.0.5

cpe:2.3:a:zohocorp:manageengine_it360:9.0.5
Zohocorp » Manageengine It360 » Version: 9.0.6

cpe:2.3:a:zohocorp:manageengine_it360:9.0.6
Zohocorp » Manageengine It360 » Version: 9.0.7

cpe:2.3:a:zohocorp:manageengine_it360:9.0.7
Zohocorp » Manageengine It360 » Version: 9.1.0

cpe:2.3:a:zohocorp:manageengine_it360:9.1.0
Zohocorp » Manageengine It360 » Version: 9.1.1

cpe:2.3:a:zohocorp:manageengine_it360:9.1.1
Zohocorp » Manageengine It360 » Version: 9.1.2

cpe:2.3:a:zohocorp:manageengine_it360:9.1.2
Zohocorp » Manageengine Opmanager » Version: N/A

cpe:2.3:a:zohocorp:manageengine_opmanager:-
Zohocorp » Manageengine Opmanager » Version: 8

cpe:2.3:a:zohocorp:manageengine_opmanager:8
Zohocorp » Manageengine Social It Plus » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_social_it_plus:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-6036

Products

Pricing

Contact Us