CVE-2020-28679

Published: Jan 10, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.

Affected (157)

Products: Zohocorp: Manageengine Applications Manager

Zohocorp

1 product

Manageengine Applications Manager

Configuration A

157 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Applications Manager	Version 11.0 build11010
Zohocorp Manageengine Applications Manager	Version 11.0 build11020
Zohocorp Manageengine Applications Manager	Version 11.0 build11030
Zohocorp Manageengine Applications Manager	Version 11.0 build11040
Zohocorp Manageengine Applications Manager	Version 11.0 build11100
Zohocorp Manageengine Applications Manager	Version 11.1 build11110
Zohocorp Manageengine Applications Manager	Version 11.2 build11200
Zohocorp Manageengine Applications Manager	Version 11.2 build11210
Zohocorp Manageengine Applications Manager	Version 11.2 build11220
Zohocorp Manageengine Applications Manager	Version 11.3 build11300
Zohocorp Manageengine Applications Manager	Version 11.4 build11410
Zohocorp Manageengine Applications Manager	Version 11.5 build11520
Zohocorp Manageengine Applications Manager	Version 11.6 build11610
Zohocorp Manageengine Applications Manager	Version 11.7 build11700
Zohocorp Manageengine Applications Manager	Version 11.8 build11800
Zohocorp Manageengine Applications Manager	Version 11.9 build11900
Zohocorp Manageengine Applications Manager	Version 11.9 build11912
Zohocorp Manageengine Applications Manager	Version 12.0 build12000
Zohocorp Manageengine Applications Manager	Version 12.0 build12010
Zohocorp Manageengine Applications Manager	Version 12.0 build12020
Zohocorp Manageengine Applications Manager	Version 12.1 build12100
Zohocorp Manageengine Applications Manager	Version 12.1 build12120
Zohocorp Manageengine Applications Manager	Version 12.2 build12200
Zohocorp Manageengine Applications Manager	Version 12.2 build12210
Zohocorp Manageengine Applications Manager	Version 12.3 build12300
Zohocorp Manageengine Applications Manager	Version 12.5 build12500
Zohocorp Manageengine Applications Manager	Version 12.6 build12600
Zohocorp Manageengine Applications Manager	Version 12.7 build12700
Zohocorp Manageengine Applications Manager	Version 12.7 build12710
Zohocorp Manageengine Applications Manager	Version 12.8 build12810
Zohocorp Manageengine Applications Manager	Version 12.9 build12900
Zohocorp Manageengine Applications Manager	Version 13.0 build13000
Zohocorp Manageengine Applications Manager	Version 13.1 build13100
Zohocorp Manageengine Applications Manager	Version 13.2 build13200
Zohocorp Manageengine Applications Manager	Version 13.2 build13210
Zohocorp Manageengine Applications Manager	Version 13.3 build13300
Zohocorp Manageengine Applications Manager	Version 13.4 build13400
Zohocorp Manageengine Applications Manager	Version 13.4 build13410
Zohocorp Manageengine Applications Manager	Version 13.4 build13420
Zohocorp Manageengine Applications Manager	Version 13.4 build13430
Zohocorp Manageengine Applications Manager	Version 13.4 build13440
Zohocorp Manageengine Applications Manager	Version 13.4 build13450
Zohocorp Manageengine Applications Manager	Version 13.5 build13500
Zohocorp Manageengine Applications Manager	Version 13.5 build13510
Zohocorp Manageengine Applications Manager	Version 13.5 build13520
Zohocorp Manageengine Applications Manager	Version 13.5 build13530
Zohocorp Manageengine Applications Manager	Version 13.5 build13540
Zohocorp Manageengine Applications Manager	Version 13.5 build13550
Zohocorp Manageengine Applications Manager	Version 13.5 build13560
Zohocorp Manageengine Applications Manager	Version 13.5 build13570
Zohocorp Manageengine Applications Manager	Version 13.5 build13580
Zohocorp Manageengine Applications Manager	Version 13.5 build13590
Zohocorp Manageengine Applications Manager	Version 13.5 build13591
Zohocorp Manageengine Applications Manager	Version 13.6 build13600
Zohocorp Manageengine Applications Manager	Version 13.6 build13610
Zohocorp Manageengine Applications Manager	Version 13.6 build13620
Zohocorp Manageengine Applications Manager	Version 13.6 build13630
Zohocorp Manageengine Applications Manager	Version 13.6 build13640
Zohocorp Manageengine Applications Manager	Version 13.6 build13650
Zohocorp Manageengine Applications Manager	Version 13.6 build13660
Zohocorp Manageengine Applications Manager	Version 13.6 build13670
Zohocorp Manageengine Applications Manager	Version 13.6 build13680
Zohocorp Manageengine Applications Manager	Version 13.6 build13690
Zohocorp Manageengine Applications Manager	Version 13.7 build13700
Zohocorp Manageengine Applications Manager	Version 13.7 build13710
Zohocorp Manageengine Applications Manager	Version 13.7 build13720
Zohocorp Manageengine Applications Manager	Version 13.7 build13730
Zohocorp Manageengine Applications Manager	Version 13.7 build13740
Zohocorp Manageengine Applications Manager	Version 13.7 build13750
Zohocorp Manageengine Applications Manager	Version 13.7 build13760
Zohocorp Manageengine Applications Manager	Version 13.7 build13770
Zohocorp Manageengine Applications Manager	Version 13.7 build13780
Zohocorp Manageengine Applications Manager	Version 13.7 build13790
Zohocorp Manageengine Applications Manager	Version 13.8 build13800
Zohocorp Manageengine Applications Manager	Version 13.8 build13810
Zohocorp Manageengine Applications Manager	Version 13.8 build13820
Zohocorp Manageengine Applications Manager	Version 13.8 build13830
Zohocorp Manageengine Applications Manager	Version 13.8 build13831
Zohocorp Manageengine Applications Manager	Version 13.8 build13840
Zohocorp Manageengine Applications Manager	Version 13.8 build13850
Zohocorp Manageengine Applications Manager	Version 13.8 build13860
Zohocorp Manageengine Applications Manager	Version 13.8 build13870
Zohocorp Manageengine Applications Manager	Version 13.8 build13880
Zohocorp Manageengine Applications Manager	Version 13.8 build13890
Zohocorp Manageengine Applications Manager	Version 13.9 build13900
Zohocorp Manageengine Applications Manager	Version 13.9 build13910
Zohocorp Manageengine Applications Manager	Version 13.9 build13920
Zohocorp Manageengine Applications Manager	Version 13.9 build13930
Zohocorp Manageengine Applications Manager	Version 13.9 build13940
Zohocorp Manageengine Applications Manager	Version 13.9 build13950
Zohocorp Manageengine Applications Manager	Version 13.9 build13960
Zohocorp Manageengine Applications Manager	Version 13.9 build13970
Zohocorp Manageengine Applications Manager	Version 13.9 build13980
Zohocorp Manageengine Applications Manager	Version 13.9 build13990
Zohocorp Manageengine Applications Manager	Version 14.0 build14000
Zohocorp Manageengine Applications Manager	Version 14.0 build14010
Zohocorp Manageengine Applications Manager	Version 14.0 build14020
Zohocorp Manageengine Applications Manager	Version 14.0 build14030
Zohocorp Manageengine Applications Manager	Version 14.0 build14040
Zohocorp Manageengine Applications Manager	Version 14.0 build14050
Zohocorp Manageengine Applications Manager	Version 14.0 build14060
Zohocorp Manageengine Applications Manager	Version 14.0 build14070
Zohocorp Manageengine Applications Manager	Version 14.0 build14071
Zohocorp Manageengine Applications Manager	Version 14.0 build14072
Zohocorp Manageengine Applications Manager	Version 14.0 build14073
Zohocorp Manageengine Applications Manager	Version 14.0 build14080
Zohocorp Manageengine Applications Manager	Version 14.0 build14090
Zohocorp Manageengine Applications Manager	Version 14.1 build14100
Zohocorp Manageengine Applications Manager	Version 14.1 build14110
Zohocorp Manageengine Applications Manager	Version 14.1 build14120
Zohocorp Manageengine Applications Manager	Version 14.1 build14130
Zohocorp Manageengine Applications Manager	Version 14.1 build14140
Zohocorp Manageengine Applications Manager	Version 14.1 build14150
Zohocorp Manageengine Applications Manager	Version 14.1 build14160
Zohocorp Manageengine Applications Manager	Version 14.1 build14170
Zohocorp Manageengine Applications Manager	Version 14.1 build14180
Zohocorp Manageengine Applications Manager	Version 14.1 build14190
Zohocorp Manageengine Applications Manager	Version 14.2 build14200
Zohocorp Manageengine Applications Manager	Version 14.2 build14210
Zohocorp Manageengine Applications Manager	Version 14.2 build14220
Zohocorp Manageengine Applications Manager	Version 14.2 build14230
Zohocorp Manageengine Applications Manager	Version 14.2 build14240
Zohocorp Manageengine Applications Manager	Version 14.2 build14250
Zohocorp Manageengine Applications Manager	Version 14.2 build14260
Zohocorp Manageengine Applications Manager	Version 14.2 build14261
Zohocorp Manageengine Applications Manager	Version 14.2 build14262
Zohocorp Manageengine Applications Manager	Version 14.2 build14270
Zohocorp Manageengine Applications Manager	Version 14.2 build14280
Zohocorp Manageengine Applications Manager	Version 14.2 build14290
Zohocorp Manageengine Applications Manager	Version 14.3 build14300
Zohocorp Manageengine Applications Manager	Version 14.3 build14310
Zohocorp Manageengine Applications Manager	Version 14.3 build14330
Zohocorp Manageengine Applications Manager	Version 14.3 build14331
Zohocorp Manageengine Applications Manager	Version 14.3 build14332
Zohocorp Manageengine Applications Manager	Version 14.3 build14340
Zohocorp Manageengine Applications Manager	Version 14.3 build14350
Zohocorp Manageengine Applications Manager	Version 14.3 build14360
Zohocorp Manageengine Applications Manager	Version 14.3 build14361
Zohocorp Manageengine Applications Manager	Version 14.3 build14370
Zohocorp Manageengine Applications Manager	Version 14.3 build14380
Zohocorp Manageengine Applications Manager	Version 14.3 build14390
Zohocorp Manageengine Applications Manager	Version 14.4 build14400
Zohocorp Manageengine Applications Manager	Version 14.4 build14401
Zohocorp Manageengine Applications Manager	Version 14.4 build14410
Zohocorp Manageengine Applications Manager	Version 14.4 build14420
Zohocorp Manageengine Applications Manager	Version 14.4 build14430
Zohocorp Manageengine Applications Manager	Version 14.4 build14440
Zohocorp Manageengine Applications Manager	Version 14.4 build14450
Zohocorp Manageengine Applications Manager	Version 14.4 build14460
Zohocorp Manageengine Applications Manager	Version 14.4 build14470
Zohocorp Manageengine Applications Manager	Version 14.4 build14480
Zohocorp Manageengine Applications Manager	Version 14.4 build14490
Zohocorp Manageengine Applications Manager	Version 14.5 build14500
Zohocorp Manageengine Applications Manager	Version 14.5 build14510
Zohocorp Manageengine Applications Manager	Version 14.5 build14520
Zohocorp Manageengine Applications Manager	Version 14.5 build14530
Zohocorp Manageengine Applications Manager	Version 14.5 build14540

Related CWEs

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

References (2)

https://www.manageengine.com/products/applications_manager/issues.html#v14550

Source: cve@mitre.org

Release NotesVendor Advisory

https://www.manageengine.com/products/applications_manager/issues.html#v14550

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.