CVE-2014-6043

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote…

published September 11, 2014

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12797 · 96.3th percentile
Published
2014-09-11T15:00Z
EPSS history
Timeline
  • 11 SEP 15:00Z
    ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote…
    cvelistv5