CVE-2020-24743

Published: Nov 3, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter.

Affected (7)

Products: Zohocorp: Manageengine Applications Manager

Zohocorp

1 product

Manageengine Applications Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Applications Manager	Before 14.5
Zohocorp Manageengine Applications Manager	Version 14.5
Zohocorp Manageengine Applications Manager	Version 14.5 build14500
Zohocorp Manageengine Applications Manager	Version 14.5 build14510
Zohocorp Manageengine Applications Manager	Version 14.5 build14520
Zohocorp Manageengine Applications Manager	Version 14.5 build14530
Zohocorp Manageengine Applications Manager	Version 14.5 build14540

References (2)

https://www.manageengine.com/products/applications_manager/issues.html#v14550

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/products/applications_manager/issues.html#v14550

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.