CVE-2020-15594

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511

Medium · published September 29, 2020

CVSS v3.1
4.3
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product is deployed.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01772 · 78.0th percentile
Published
2020-09-29T13:16Z
EPSS history
Timeline
  • 29 SEP 13:16Z
    An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511
    cvelistv5