Skip to content

CVE-2017-16848 Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.

CriticalCVSS 9.8 EPSS 15.1%
Published
Updated
Exploit status
No public exploit known

Description

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.

Affected products

ProductAffected versionsFixed in
Zohocorp ManageEngine Applications Manager = 13.0 No fix listed

References