CVE-2020-24786

Published: Aug 31, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build number 12136, ADAudit Plus before build number 6052, O365 Manager Plus before build number 4334, Cloud Security Plus before build number 4110, ADManager Plus before build number 7055, and Log360 before build number 5166. The remotely accessible Java servlet com.manageengine.ads.fw.servlet.UpdateProductDetails is prone to an authentication bypass. System integration properties can be modified and lead to full ManageEngine suite compromise.

Affected (152)

Products: Zohocorp: Manageengine Adselfservice Plus, Manageengine Exchange Reporter Plus, Manageengine Ad360, Manageengine Datasecurity Plus, Manageengine Recovermanager Plus, Manageengine Eventlog Analyzer, Manageengine Adaudit Plus, Manageengine O365 Manager Plus, Manageengine Cloud Security Plus, Manageengine Admanager Plus, Manageengine Log360

Zohocorp

11 products

Manageengine Adselfservice Plus

Manageengine Exchange Reporter Plus

Manageengine Ad360

Manageengine Datasecurity Plus

Manageengine Recovermanager Plus

Manageengine Eventlog Analyzer

Manageengine Adaudit Plus

Manageengine O365 Manager Plus

Manageengine Cloud Security Plus

Manageengine Admanager Plus

Manageengine Log360

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adselfservice Plus	Up to 5.7
Zohocorp Manageengine Adselfservice Plus	Version 5.8
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5800
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5801
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5802
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5803
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5804
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5805
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5806
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5807
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5808
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5809
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5810
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5811
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5812
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5813
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5814
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5815
Zohocorp Manageengine Adselfservice Plus	Version 5.8 5816

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Exchange Reporter Plus	Up to 5.4
Zohocorp Manageengine Exchange Reporter Plus	Version 5.5 5500
Zohocorp Manageengine Exchange Reporter Plus	Version 5.5 5501
Zohocorp Manageengine Exchange Reporter Plus	Version 5.5 5502
Zohocorp Manageengine Exchange Reporter Plus	Version 5.5 5503
Zohocorp Manageengine Exchange Reporter Plus	Version 5.5 5504

Configuration C

25 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Ad360	Up to 4.1
Zohocorp Manageengine Ad360	Version 4.2 4200
Zohocorp Manageengine Ad360	Version 4.2 4201
Zohocorp Manageengine Ad360	Version 4.2 4202
Zohocorp Manageengine Ad360	Version 4.2 4203
Zohocorp Manageengine Ad360	Version 4.2 4204
Zohocorp Manageengine Ad360	Version 4.2 4205
Zohocorp Manageengine Ad360	Version 4.2 4206
Zohocorp Manageengine Ad360	Version 4.2 4207
Zohocorp Manageengine Ad360	Version 4.2 4208
Zohocorp Manageengine Ad360	Version 4.2 4209
Zohocorp Manageengine Ad360	Version 4.2 4210
Zohocorp Manageengine Ad360	Version 4.2 4212
Zohocorp Manageengine Ad360	Version 4.2 4213
Zohocorp Manageengine Ad360	Version 4.2 4214
Zohocorp Manageengine Ad360	Version 4.2 4215
Zohocorp Manageengine Ad360	Version 4.2 4216
Zohocorp Manageengine Ad360	Version 4.2 4217
Zohocorp Manageengine Ad360	Version 4.2 4219
Zohocorp Manageengine Ad360	Version 4.2 4220
Zohocorp Manageengine Ad360	Version 4.2 4222
Zohocorp Manageengine Ad360	Version 4.2 4223
Zohocorp Manageengine Ad360	Version 4.2 4224
Zohocorp Manageengine Ad360	Version 4.2 4225
Zohocorp Manageengine Ad360	Version 4.2 4227

Configuration D

14 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Datasecurity Plus	Up to 5.0
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6000
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6001
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6002
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6003
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6010
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6011
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6012
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6013
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6020
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6021
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6030
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6031
Zohocorp Manageengine Datasecurity Plus	Version 6.0 6032

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Recovermanager Plus	Up to 5.4
Zohocorp Manageengine Recovermanager Plus	Version 6.0 6001
Zohocorp Manageengine Recovermanager Plus	Version 6.0 6003
Zohocorp Manageengine Recovermanager Plus	Version 6.0 6005
Zohocorp Manageengine Recovermanager Plus	Version 6.0 6011
Zohocorp Manageengine Recovermanager Plus	Version 6.0 6016

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Eventlog Analyzer	Up to 12.1.2
Zohocorp Manageengine Eventlog Analyzer	Version 12.1.3 12130
Zohocorp Manageengine Eventlog Analyzer	Version 12.1.3 12135

Configuration G

12 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adaudit Plus	Up to 5.1
Zohocorp Manageengine Adaudit Plus	Version 6.0 6000
Zohocorp Manageengine Adaudit Plus	Version 6.0 6001
Zohocorp Manageengine Adaudit Plus	Version 6.0 6002
Zohocorp Manageengine Adaudit Plus	Version 6.0 6003
Zohocorp Manageengine Adaudit Plus	Version 6.0 6010
Zohocorp Manageengine Adaudit Plus	Version 6.0 6030
Zohocorp Manageengine Adaudit Plus	Version 6.0 6031
Zohocorp Manageengine Adaudit Plus	Version 6.0 6032
Zohocorp Manageengine Adaudit Plus	Version 6.0 6033
Zohocorp Manageengine Adaudit Plus	Version 6.0 6050
Zohocorp Manageengine Adaudit Plus	Version 6.0 6052

Configuration H

30 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine O365 Manager Plus	Up to 4.2
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4300
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4301
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4302
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4303
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4304
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4305
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4306
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4308
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4309
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4310
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4311
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4312
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4316
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4317
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4318
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4319
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4320
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4321
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4322
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4324
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4325
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4327
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4328
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4329
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4330
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4331
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4332
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4333
Zohocorp Manageengine O365 Manager Plus	Version 4.3 4334

Configuration I

11 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Cloud Security Plus	Up to 4.0
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4100
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4101
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4102
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4103
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4104
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4105
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4106
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4107
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4108
Zohocorp Manageengine Cloud Security Plus	Version 4.1 4109

Configuration J

13 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Admanager Plus	Up to 6.6
Zohocorp Manageengine Admanager Plus	Version 7.0 7000
Zohocorp Manageengine Admanager Plus	Version 7.0 7010
Zohocorp Manageengine Admanager Plus	Version 7.0 7011
Zohocorp Manageengine Admanager Plus	Version 7.0 7020
Zohocorp Manageengine Admanager Plus	Version 7.0 7030
Zohocorp Manageengine Admanager Plus	Version 7.0 7040
Zohocorp Manageengine Admanager Plus	Version 7.0 7041
Zohocorp Manageengine Admanager Plus	Version 7.0 7050
Zohocorp Manageengine Admanager Plus	Version 7.0 7051
Zohocorp Manageengine Admanager Plus	Version 7.0 7052
Zohocorp Manageengine Admanager Plus	Version 7.0 7053
Zohocorp Manageengine Admanager Plus	Version 7.0 7054

Configuration K

13 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Log360	Up to 5.0
Zohocorp Manageengine Log360	Version 5.1 5100
Zohocorp Manageengine Log360	Version 5.1 5102
Zohocorp Manageengine Log360	Version 5.1 5107
Zohocorp Manageengine Log360	Version 5.1 5108
Zohocorp Manageengine Log360	Version 5.1 5110
Zohocorp Manageengine Log360	Version 5.1 5111
Zohocorp Manageengine Log360	Version 5.1 5120
Zohocorp Manageengine Log360	Version 5.1 5150
Zohocorp Manageengine Log360	Version 5.1 5154
Zohocorp Manageengine Log360	Version 5.1 5155
Zohocorp Manageengine Log360	Version 5.1 5160
Zohocorp Manageengine Log360	Version 5.1 5164