CVE-2020-28679

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
zohocorpmanageengine_applications_manager
11.0:build11010
zohocorpmanageengine_applications_manager
11.0:build11020
zohocorpmanageengine_applications_manager
11.0:build11030
zohocorpmanageengine_applications_manager
11.0:build11040
zohocorpmanageengine_applications_manager
11.0:build11100
zohocorpmanageengine_applications_manager
11.1:build11110
zohocorpmanageengine_applications_manager
11.2:build11200
zohocorpmanageengine_applications_manager
11.2:build11210
zohocorpmanageengine_applications_manager
11.2:build11220
zohocorpmanageengine_applications_manager
11.3:build11300
zohocorpmanageengine_applications_manager
11.4:build11410
zohocorpmanageengine_applications_manager
11.5:build11520
zohocorpmanageengine_applications_manager
11.6:build11610
zohocorpmanageengine_applications_manager
11.7:build11700
zohocorpmanageengine_applications_manager
11.8:build11800
zohocorpmanageengine_applications_manager
11.9:build11900
zohocorpmanageengine_applications_manager
11.9:build11912
zohocorpmanageengine_applications_manager
12.0:build12000
zohocorpmanageengine_applications_manager
12.0:build12010
zohocorpmanageengine_applications_manager
12.0:build12020
zohocorpmanageengine_applications_manager
12.1:build12100
zohocorpmanageengine_applications_manager
12.1:build12120
zohocorpmanageengine_applications_manager
12.2:build12200
zohocorpmanageengine_applications_manager
12.2:build12210
zohocorpmanageengine_applications_manager
12.3:build12300
zohocorpmanageengine_applications_manager
12.5:build12500
zohocorpmanageengine_applications_manager
12.6:build12600
zohocorpmanageengine_applications_manager
12.7:build12700
zohocorpmanageengine_applications_manager
12.7:build12710
zohocorpmanageengine_applications_manager
12.8:build12810
zohocorpmanageengine_applications_manager
12.9:build12900
zohocorpmanageengine_applications_manager
13.0:build13000
zohocorpmanageengine_applications_manager
13.1:build13100
zohocorpmanageengine_applications_manager
13.2:build13200
zohocorpmanageengine_applications_manager
13.2:build13210
zohocorpmanageengine_applications_manager
13.3:build13300
zohocorpmanageengine_applications_manager
13.4:build13400
zohocorpmanageengine_applications_manager
13.4:build13410
zohocorpmanageengine_applications_manager
13.4:build13420
zohocorpmanageengine_applications_manager
13.4:build13430
zohocorpmanageengine_applications_manager
13.4:build13440
zohocorpmanageengine_applications_manager
13.4:build13450
zohocorpmanageengine_applications_manager
13.5:build13500
zohocorpmanageengine_applications_manager
13.5:build13510
zohocorpmanageengine_applications_manager
13.5:build13520
zohocorpmanageengine_applications_manager
13.5:build13530
zohocorpmanageengine_applications_manager
13.5:build13540
zohocorpmanageengine_applications_manager
13.5:build13550
zohocorpmanageengine_applications_manager
13.5:build13560
zohocorpmanageengine_applications_manager
13.5:build13570
zohocorpmanageengine_applications_manager
13.5:build13580
zohocorpmanageengine_applications_manager
13.5:build13590
zohocorpmanageengine_applications_manager
13.5:build13591
zohocorpmanageengine_applications_manager
13.6:build13600
zohocorpmanageengine_applications_manager
13.6:build13610
zohocorpmanageengine_applications_manager
13.6:build13620
zohocorpmanageengine_applications_manager
13.6:build13630
zohocorpmanageengine_applications_manager
13.6:build13640
zohocorpmanageengine_applications_manager
13.6:build13650
zohocorpmanageengine_applications_manager
13.6:build13660
zohocorpmanageengine_applications_manager
13.6:build13670
zohocorpmanageengine_applications_manager
13.6:build13680
zohocorpmanageengine_applications_manager
13.6:build13690
zohocorpmanageengine_applications_manager
13.7:build13700
zohocorpmanageengine_applications_manager
13.7:build13710
zohocorpmanageengine_applications_manager
13.7:build13720
zohocorpmanageengine_applications_manager
13.7:build13730
zohocorpmanageengine_applications_manager
13.7:build13740
zohocorpmanageengine_applications_manager
13.7:build13750
zohocorpmanageengine_applications_manager
13.7:build13760
zohocorpmanageengine_applications_manager
13.7:build13770
zohocorpmanageengine_applications_manager
13.7:build13780
zohocorpmanageengine_applications_manager
13.7:build13790
zohocorpmanageengine_applications_manager
13.8:build13800
zohocorpmanageengine_applications_manager
13.8:build13810
zohocorpmanageengine_applications_manager
13.8:build13820
zohocorpmanageengine_applications_manager
13.8:build13830
zohocorpmanageengine_applications_manager
13.8:build13831
zohocorpmanageengine_applications_manager
13.8:build13840
zohocorpmanageengine_applications_manager
13.8:build13850
zohocorpmanageengine_applications_manager
13.8:build13860
zohocorpmanageengine_applications_manager
13.8:build13870
zohocorpmanageengine_applications_manager
13.8:build13880
zohocorpmanageengine_applications_manager
13.8:build13890
zohocorpmanageengine_applications_manager
13.9:build13900
zohocorpmanageengine_applications_manager
13.9:build13910
zohocorpmanageengine_applications_manager
13.9:build13920
zohocorpmanageengine_applications_manager
13.9:build13930
zohocorpmanageengine_applications_manager
13.9:build13940
zohocorpmanageengine_applications_manager
13.9:build13950
zohocorpmanageengine_applications_manager
13.9:build13960
zohocorpmanageengine_applications_manager
13.9:build13970
zohocorpmanageengine_applications_manager
13.9:build13980
zohocorpmanageengine_applications_manager
13.9:build13990
zohocorpmanageengine_applications_manager
14.0:build14000
zohocorpmanageengine_applications_manager
14.0:build14010
zohocorpmanageengine_applications_manager
14.0:build14020
zohocorpmanageengine_applications_manager
14.0:build14030
zohocorpmanageengine_applications_manager
14.0:build14040
zohocorpmanageengine_applications_manager
14.0:build14050
zohocorpmanageengine_applications_manager
14.0:build14060
zohocorpmanageengine_applications_manager
14.0:build14070
zohocorpmanageengine_applications_manager
14.0:build14071
zohocorpmanageengine_applications_manager
14.0:build14072
zohocorpmanageengine_applications_manager
14.0:build14073
zohocorpmanageengine_applications_manager
14.0:build14080
zohocorpmanageengine_applications_manager
14.0:build14090
zohocorpmanageengine_applications_manager
14.1:build14100
zohocorpmanageengine_applications_manager
14.1:build14110
zohocorpmanageengine_applications_manager
14.1:build14120
zohocorpmanageengine_applications_manager
14.1:build14130
zohocorpmanageengine_applications_manager
14.1:build14140
zohocorpmanageengine_applications_manager
14.1:build14150
zohocorpmanageengine_applications_manager
14.1:build14160
zohocorpmanageengine_applications_manager
14.1:build14170
zohocorpmanageengine_applications_manager
14.1:build14180
zohocorpmanageengine_applications_manager
14.1:build14190
zohocorpmanageengine_applications_manager
14.2:build14200
zohocorpmanageengine_applications_manager
14.2:build14210
zohocorpmanageengine_applications_manager
14.2:build14220
zohocorpmanageengine_applications_manager
14.2:build14230
zohocorpmanageengine_applications_manager
14.2:build14240
zohocorpmanageengine_applications_manager
14.2:build14250
zohocorpmanageengine_applications_manager
14.2:build14260
zohocorpmanageengine_applications_manager
14.2:build14261
zohocorpmanageengine_applications_manager
14.2:build14262
zohocorpmanageengine_applications_manager
14.2:build14270
zohocorpmanageengine_applications_manager
14.2:build14280
zohocorpmanageengine_applications_manager
14.2:build14290
zohocorpmanageengine_applications_manager
14.3:build14300
zohocorpmanageengine_applications_manager
14.3:build14310
zohocorpmanageengine_applications_manager
14.3:build14330
zohocorpmanageengine_applications_manager
14.3:build14331
zohocorpmanageengine_applications_manager
14.3:build14332
zohocorpmanageengine_applications_manager
14.3:build14340
zohocorpmanageengine_applications_manager
14.3:build14350
zohocorpmanageengine_applications_manager
14.3:build14360
zohocorpmanageengine_applications_manager
14.3:build14361
zohocorpmanageengine_applications_manager
14.3:build14370
zohocorpmanageengine_applications_manager
14.3:build14380
zohocorpmanageengine_applications_manager
14.3:build14390
zohocorpmanageengine_applications_manager
14.4:build14400
zohocorpmanageengine_applications_manager
14.4:build14401
zohocorpmanageengine_applications_manager
14.4:build14410
zohocorpmanageengine_applications_manager
14.4:build14420
zohocorpmanageengine_applications_manager
14.4:build14430
zohocorpmanageengine_applications_manager
14.4:build14440
zohocorpmanageengine_applications_manager
14.4:build14450
zohocorpmanageengine_applications_manager
14.4:build14460
zohocorpmanageengine_applications_manager
14.4:build14470
zohocorpmanageengine_applications_manager
14.4:build14480
zohocorpmanageengine_applications_manager
14.4:build14490
zohocorpmanageengine_applications_manager
14.5:build14500
zohocorpmanageengine_applications_manager
14.5:build14510
zohocorpmanageengine_applications_manager
14.5:build14520
zohocorpmanageengine_applications_manager
14.5:build14530
zohocorpmanageengine_applications_manager
14.5:build14540
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.manageengine.com/products/applications_manager/issues.html#v14550
https://www.manageengine.com/products/applications_manager/issues.html#v14550