← All advisories

High severity8.8NVD Advisory· Published Oct 6, 2020· Updated Jun 17, 2026

CVE-2020-16267

CVE-2020-16267

Description

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Zohocorp/Manageengine Applications Manager7 versions
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:*:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:-:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:build14700:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:build14710:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:build14720:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:build14730:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_applications_manager:14.7:build14740:*:*:*:*:*:*
Zoho/ManageEngine Applications Managerdescription
Zoho/ManageEngine Application Control Plusllm-fuzzy
Range: <=14740

Patches

Vulnerability mechanics

References

3

www.manageengine.com/products/applications_manager/issues.htmlnvdVendor Advisory
www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-16267.htmlnvdVendor Advisory
www.manageengine.comnvdProduct

News mentions

0

No linked articles in our index yet.