← Back

Eg Manager

eg_manager

Vendor: Eginnovations • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-29594
1Eginnovations
4Eg Agent
Eg ManagerEg Rum Collectors+1 more
Jun 17, 2026
Jun 2, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.
CVE-2020-8592
1Eginnovations
1Eg Manager
Jun 17, 2026
Feb 3, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).
CVE-2020-8591
1Eginnovations
1Eg Manager
Jun 17, 2026
Feb 3, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.