CVE-2020-10816

Published: Oct 8, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet.

Affected (10)

Products: Zohocorp: Manageengine Applications Manager

Zohocorp

1 product

Manageengine Applications Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Applications Manager	Version 14.7
Zohocorp Manageengine Applications Manager	Version 14.7 build14700
Zohocorp Manageengine Applications Manager	Version 14.7 build14710
Zohocorp Manageengine Applications Manager	Version 14.7 build14720
Zohocorp Manageengine Applications Manager	Version 14.7 build14730
Zohocorp Manageengine Applications Manager	Version 14.7 build14740
Zohocorp Manageengine Applications Manager	Version 14.7 build14750
Zohocorp Manageengine Applications Manager	Version 14.7 build14760
Zohocorp Manageengine Applications Manager	Version 14.7 build14770
Zohocorp Manageengine Applications Manager	Version 14.7 build14780