CVE-2020-35765

PoC —

CVSS 3.1

8.8 high

EPSS

27%p98

Published

Feb 5, 2021 (Feb 5, 2021)

Modified

Jun 17, 2026

Description

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do.

Vendors: zohocorp
Products: manageengine applications manager
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (27.3%)

In the news0 stories

No ingested article mentions this CVE yet.