SQL Injection Vulnerability in ManageEngine Applications Manager by Zoho
CVE-2020-15927

8.8HIGH

Key Information:

Vendor: Zohocorp
Status: Manageengine Applications Manager
Vendor: CVE Published:; 6 October 2020

What is CVE-2020-15927?

An SQL Injection vulnerability exists in Zoho's ManageEngine Applications Manager versions up to and including 14740. This vulnerability allows an authenticated attacker to manipulate SQL queries via a specially crafted JSP request within the SAP module. If exploited, this could lead to unauthorized data access and potential data manipulation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch