Skip to content
OpenAdvisories

Product · ManageEngine

Applications Manager

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Unscored —
    CVE-2016-9488 Public exploit

    ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities

    ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker cou…