CVE-2020-14008

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
zohocorpmanageengine_applications_manager
𝑥
≤ 13.0
zohocorpmanageengine_applications_manager
14.0
zohocorpmanageengine_applications_manager
14.0:build14000
zohocorpmanageengine_applications_manager
14.0:build14010
zohocorpmanageengine_applications_manager
14.0:build14020
zohocorpmanageengine_applications_manager
14.0:build14030
zohocorpmanageengine_applications_manager
14.0:build14040
zohocorpmanageengine_applications_manager
14.0:build14050
zohocorpmanageengine_applications_manager
14.0:build14060
zohocorpmanageengine_applications_manager
14.0:build14070
zohocorpmanageengine_applications_manager
14.0:build14071
zohocorpmanageengine_applications_manager
14.0:build14072
zohocorpmanageengine_applications_manager
14.0:build14073
zohocorpmanageengine_applications_manager
14.0:build14080
zohocorpmanageengine_applications_manager
14.0:build14090
zohocorpmanageengine_applications_manager
14.0:build14100
zohocorpmanageengine_applications_manager
14.0:build14110
zohocorpmanageengine_applications_manager
14.0:build14120
zohocorpmanageengine_applications_manager
14.0:build14130
zohocorpmanageengine_applications_manager
14.0:build14140
zohocorpmanageengine_applications_manager
14.0:build14150
zohocorpmanageengine_applications_manager
14.0:build14160
zohocorpmanageengine_applications_manager
14.0:build14170
zohocorpmanageengine_applications_manager
14.0:build14180
zohocorpmanageengine_applications_manager
14.0:build14190
zohocorpmanageengine_applications_manager
14.0:build14200
zohocorpmanageengine_applications_manager
14.0:build14210
zohocorpmanageengine_applications_manager
14.0:build14220
zohocorpmanageengine_applications_manager
14.0:build14230
zohocorpmanageengine_applications_manager
14.0:build14240
zohocorpmanageengine_applications_manager
14.0:build14250
zohocorpmanageengine_applications_manager
14.0:build14260
zohocorpmanageengine_applications_manager
14.0:build14261
zohocorpmanageengine_applications_manager
14.0:build14262
zohocorpmanageengine_applications_manager
14.0:build14270
zohocorpmanageengine_applications_manager
14.0:build14280
zohocorpmanageengine_applications_manager
14.0:build14290
zohocorpmanageengine_applications_manager
14.0:build14300
zohocorpmanageengine_applications_manager
14.0:build14310
zohocorpmanageengine_applications_manager
14.0:build14330
zohocorpmanageengine_applications_manager
14.0:build14331
zohocorpmanageengine_applications_manager
14.0:build14332
zohocorpmanageengine_applications_manager
14.0:build14340
zohocorpmanageengine_applications_manager
14.0:build14350
zohocorpmanageengine_applications_manager
14.0:build14360
zohocorpmanageengine_applications_manager
14.0:build14361
zohocorpmanageengine_applications_manager
14.0:build14370
zohocorpmanageengine_applications_manager
14.0:build14380
zohocorpmanageengine_applications_manager
14.0:build14390
zohocorpmanageengine_applications_manager
14.0:build14400
zohocorpmanageengine_applications_manager
14.0:build14401
zohocorpmanageengine_applications_manager
14.0:build14410
zohocorpmanageengine_applications_manager
14.0:build14420
zohocorpmanageengine_applications_manager
14.0:build14430
zohocorpmanageengine_applications_manager
14.0:build14440
zohocorpmanageengine_applications_manager
14.0:build14450
zohocorpmanageengine_applications_manager
14.0:build14460
zohocorpmanageengine_applications_manager
14.0:build14470
zohocorpmanageengine_applications_manager
14.0:build14480
zohocorpmanageengine_applications_manager
14.0:build14490
zohocorpmanageengine_applications_manager
14.0:build14500
zohocorpmanageengine_applications_manager
14.0:build14510
zohocorpmanageengine_applications_manager
14.0:build14520
zohocorpmanageengine_applications_manager
14.0:build14530
zohocorpmanageengine_applications_manager
14.0:build14531
zohocorpmanageengine_applications_manager
14.0:build14532
zohocorpmanageengine_applications_manager
14.0:build14533
zohocorpmanageengine_applications_manager
14.0:build14540
zohocorpmanageengine_applications_manager
14.0:build14550
zohocorpmanageengine_applications_manager
14.0:build14560
zohocorpmanageengine_applications_manager
14.0:build14570
zohocorpmanageengine_applications_manager
14.0:build14580
zohocorpmanageengine_applications_manager
14.0:build14590
zohocorpmanageengine_applications_manager
14.0:build14600
zohocorpmanageengine_applications_manager
14.0:build14610
zohocorpmanageengine_applications_manager
14.0:build14620
zohocorpmanageengine_applications_manager
14.0:build14630
zohocorpmanageengine_applications_manager
14.0:build14660
zohocorpmanageengine_applications_manager
14.0:build14670
zohocorpmanageengine_applications_manager
14.0:build14681
zohocorpmanageengine_applications_manager
14.0:build14682
zohocorpmanageengine_applications_manager
14.0:build14683
zohocorpmanageengine_applications_manager
14.0:build14684
zohocorpmanageengine_applications_manager
14.0:build14685
zohocorpmanageengine_applications_manager
14.0:build14690
zohocorpmanageengine_applications_manager
14.0:build14700
zohocorpmanageengine_applications_manager
14.0:build14710
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
https://www.manageengine.com
https://www.manageengine.com/products/applications_manager/issues.html#14730
http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
https://www.manageengine.com
https://www.manageengine.com/products/applications_manager/issues.html#14730