CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-19649

Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.611

EPSS Ranking 98.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-19649

Zohocorp » Manageengine Applications Manager » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.0
Zohocorp » Manageengine Applications Manager » Version: 11.1

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.1
Zohocorp » Manageengine Applications Manager » Version: 11.2

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.2
Zohocorp » Manageengine Applications Manager » Version: 11.3

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.3
Zohocorp » Manageengine Applications Manager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.4
Zohocorp » Manageengine Applications Manager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.5
Zohocorp » Manageengine Applications Manager » Version: 11.6

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.6
Zohocorp » Manageengine Applications Manager » Version: 11.7

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.7
Zohocorp » Manageengine Applications Manager » Version: 11.8

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.8
Zohocorp » Manageengine Applications Manager » Version: 11.9

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.9
Zohocorp » Manageengine Applications Manager » Version: 12.0

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.0
Zohocorp » Manageengine Applications Manager » Version: 12.1

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.1
Zohocorp » Manageengine Applications Manager » Version: 12.2

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.2
Zohocorp » Manageengine Applications Manager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.3
Zohocorp » Manageengine Applications Manager » Version: 12.4

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.4
Zohocorp » Manageengine Applications Manager » Version: 12.5

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.5
Zohocorp » Manageengine Applications Manager » Version: 12.6

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.6
Zohocorp » Manageengine Applications Manager » Version: 12.7

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.7
Zohocorp » Manageengine Applications Manager » Version: 12.8

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.8
Zohocorp » Manageengine Applications Manager » Version: 12.9

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.9
Zohocorp » Manageengine Applications Manager » Version: 13

cpe:2.3:a:zohocorp:manageengine_applications_manager:13
Zohocorp » Manageengine Applications Manager » Version: 13.0

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0
Zohocorp » Manageengine Applications Manager » Version: 13.1

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.1
Zohocorp » Manageengine Applications Manager » Version: 13.2

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.2
Zohocorp » Manageengine Applications Manager » Version: 13.3

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.3
Zohocorp » Manageengine Applications Manager » Version: 13.4

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.4
Zohocorp » Manageengine Applications Manager » Version: 13.5

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.5
Zohocorp » Manageengine Applications Manager » Version: 13.6

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-19649

Products

Pricing

Contact Us