CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-7863

The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to (1) read arbitrary files via the fileName parameter in a copyfile operation or (2) obtain sensitive information via a directory listing in a listdirectory operation to servlet/FailOverHelperServlet.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.889

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2014-7863

Zohocorp » Manageengine Applications Manager » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.0
Zohocorp » Manageengine Applications Manager » Version: 11.1

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.1
Zohocorp » Manageengine Applications Manager » Version: 11.2

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.2
Zohocorp » Manageengine Applications Manager » Version: 11.3

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.3
Zohocorp » Manageengine Applications Manager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.4
Zohocorp » Manageengine Applications Manager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.5
Zohocorp » Manageengine Applications Manager » Version: 11.6

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.6
Zohocorp » Manageengine Applications Manager » Version: 11.7

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.7
Zohocorp » Manageengine Applications Manager » Version: 11.8

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.8
Zohocorp » Manageengine Applications Manager » Version: 11.9

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.9
Zohocorp » Manageengine It360 » Version: N/A

cpe:2.3:a:zohocorp:manageengine_it360:-
Zohocorp » Manageengine It360 » Version: 10.3

cpe:2.3:a:zohocorp:manageengine_it360:10.3
Zohocorp » Manageengine It360 » Version: 10.3.0

cpe:2.3:a:zohocorp:manageengine_it360:10.3.0
Zohocorp » Manageengine It360 » Version: 10.3.3

cpe:2.3:a:zohocorp:manageengine_it360:10.3.3
Zohocorp » Manageengine It360 » Version: 10.5

cpe:2.3:a:zohocorp:manageengine_it360:10.5
Zohocorp » Manageengine It360 » Version: 8.4.0

cpe:2.3:a:zohocorp:manageengine_it360:8.4.0
Zohocorp » Manageengine It360 » Version: 8.5.0

cpe:2.3:a:zohocorp:manageengine_it360:8.5.0
Zohocorp » Manageengine It360 » Version: 8.5.1

cpe:2.3:a:zohocorp:manageengine_it360:8.5.1
Zohocorp » Manageengine It360 » Version: 8.5.2

cpe:2.3:a:zohocorp:manageengine_it360:8.5.2
Zohocorp » Manageengine It360 » Version: 8.5.3

cpe:2.3:a:zohocorp:manageengine_it360:8.5.3
Zohocorp » Manageengine It360 » Version: 8.5.4

cpe:2.3:a:zohocorp:manageengine_it360:8.5.4
Zohocorp » Manageengine It360 » Version: 8.5.5

cpe:2.3:a:zohocorp:manageengine_it360:8.5.5
Zohocorp » Manageengine It360 » Version: 9.0.0

cpe:2.3:a:zohocorp:manageengine_it360:9.0.0
Zohocorp » Manageengine It360 » Version: 9.0.1

cpe:2.3:a:zohocorp:manageengine_it360:9.0.1
Zohocorp » Manageengine It360 » Version: 9.0.2

cpe:2.3:a:zohocorp:manageengine_it360:9.0.2
Zohocorp » Manageengine It360 » Version: 9.0.3

cpe:2.3:a:zohocorp:manageengine_it360:9.0.3
Zohocorp » Manageengine It360 » Version: 9.0.4

cpe:2.3:a:zohocorp:manageengine_it360:9.0.4
Zohocorp » Manageengine It360 » Version: 9.0.5

cpe:2.3:a:zohocorp:manageengine_it360:9.0.5
Zohocorp » Manageengine It360 » Version: 9.0.6

cpe:2.3:a:zohocorp:manageengine_it360:9.0.6
Zohocorp » Manageengine It360 » Version: 9.0.7

cpe:2.3:a:zohocorp:manageengine_it360:9.0.7
Zohocorp » Manageengine It360 » Version: 9.1.0

cpe:2.3:a:zohocorp:manageengine_it360:9.1.0
Zohocorp » Manageengine It360 » Version: 9.1.1

cpe:2.3:a:zohocorp:manageengine_it360:9.1.1
Zohocorp » Manageengine It360 » Version: 9.1.2

cpe:2.3:a:zohocorp:manageengine_it360:9.1.2
Zohocorp » Manageengine Opmanager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
Zohocorp » Manageengine Opmanager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
Zohocorp » Manageengine Opmanager » Version: 8

cpe:2.3:a:zohocorp:manageengine_opmanager:8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-7863

Products

Pricing

Contact Us