CVE-2020-27995

—

CVSS 3.1

9.8 critical

EPSS

9%p95

Published

Oct 29, 2020 (Oct 29, 2020)

Modified

Jun 17, 2026

Description

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

Vendors: zohocorp
Products: manageengine applications manager
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news0 stories

No ingested article mentions this CVE yet.