CVE-2019-19799

Published: Mar 13, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet.

Affected (11)

Products: Zohocorp: Manageengine Applications Manager

Zohocorp

1 product

Manageengine Applications Manager

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Applications Manager	Before 14.5
Zohocorp Manageengine Applications Manager	Version 14.5
Zohocorp Manageengine Applications Manager	Version 14.5 build14500
Zohocorp Manageengine Applications Manager	Version 14.5 build14510
Zohocorp Manageengine Applications Manager	Version 14.5 build14520
Zohocorp Manageengine Applications Manager	Version 14.5 build14530
Zohocorp Manageengine Applications Manager	Version 14.5 build14540
Zohocorp Manageengine Applications Manager	Version 14.5 build14560
Zohocorp Manageengine Applications Manager	Version 14.5 build14570
Zohocorp Manageengine Applications Manager	Version 14.5 build14580
Zohocorp Manageengine Applications Manager	Version 14.5 build14590