Vulnerability Details CVE-2020-28679
A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 88.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2020-28679
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.0
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.1
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.2
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.3
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.4
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.5
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.6
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.7
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.8
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:11.9
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.0
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.1
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.2
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.3
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.5
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.6
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.7
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.8
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:12.9
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.1
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.2
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.3
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.4
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.5
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.6
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.7
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.8
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:13.9
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.1
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.2
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.3
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.4
-
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.5