Read the docs
TI-2020-10974 Aliases CVE-2020-14008GHSA-5f59-43c8-2pqw

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin…

Priority MEDIUM 59CWE-434Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-434.

Summary

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.

Why it matters now

EPSS 0.3957 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 87

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*up to 13.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:-:*:*:*:*:*:*14.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14000:*:*:*:*:*:*14.0 build14000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14010:*:*:*:*:*:*14.0 build14010VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14020:*:*:*:*:*:*14.0 build14020VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14030:*:*:*:*:*:*14.0 build14030VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14040:*:*:*:*:*:*14.0 build14040VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14050:*:*:*:*:*:*14.0 build14050VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14060:*:*:*:*:*:*14.0 build14060VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14070:*:*:*:*:*:*14.0 build14070VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:* Versions up to 13.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:-:*:*:*:*:*:* Versions 14.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14000:*:*:*:*:*:* Versions 14.0 build14000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14010:*:*:*:*:*:* Versions 14.0 build14010 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14020:*:*:*:*:*:* Versions 14.0 build14020 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14030:*:*:*:*:*:* Versions 14.0 build14030 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14040:*:*:*:*:*:* Versions 14.0 build14040 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14050:*:*:*:*:*:* Versions 14.0 build14050 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14060:*:*:*:*:*:* Versions 14.0 build14060 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14070:*:*:*:*:*:* Versions 14.0 build14070 Vulnerable ·Zohocorp
Show 77 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14071:*:*:*:*:*:*14.0 build14071VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14072:*:*:*:*:*:*14.0 build14072VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14073:*:*:*:*:*:*14.0 build14073VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14080:*:*:*:*:*:*14.0 build14080VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14090:*:*:*:*:*:*14.0 build14090VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14100:*:*:*:*:*:*14.0 build14100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14110:*:*:*:*:*:*14.0 build14110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14120:*:*:*:*:*:*14.0 build14120VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14130:*:*:*:*:*:*14.0 build14130VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14140:*:*:*:*:*:*14.0 build14140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14150:*:*:*:*:*:*14.0 build14150VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14160:*:*:*:*:*:*14.0 build14160VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14170:*:*:*:*:*:*14.0 build14170VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14180:*:*:*:*:*:*14.0 build14180VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14190:*:*:*:*:*:*14.0 build14190VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14200:*:*:*:*:*:*14.0 build14200VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14210:*:*:*:*:*:*14.0 build14210VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14220:*:*:*:*:*:*14.0 build14220VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14230:*:*:*:*:*:*14.0 build14230VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14240:*:*:*:*:*:*14.0 build14240VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14250:*:*:*:*:*:*14.0 build14250VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14260:*:*:*:*:*:*14.0 build14260VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14261:*:*:*:*:*:*14.0 build14261VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14262:*:*:*:*:*:*14.0 build14262VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14270:*:*:*:*:*:*14.0 build14270VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14280:*:*:*:*:*:*14.0 build14280VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14290:*:*:*:*:*:*14.0 build14290VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14300:*:*:*:*:*:*14.0 build14300VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14310:*:*:*:*:*:*14.0 build14310VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14330:*:*:*:*:*:*14.0 build14330VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14331:*:*:*:*:*:*14.0 build14331VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14332:*:*:*:*:*:*14.0 build14332VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14340:*:*:*:*:*:*14.0 build14340VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14350:*:*:*:*:*:*14.0 build14350VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14360:*:*:*:*:*:*14.0 build14360VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14361:*:*:*:*:*:*14.0 build14361VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14370:*:*:*:*:*:*14.0 build14370VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14380:*:*:*:*:*:*14.0 build14380VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14390:*:*:*:*:*:*14.0 build14390VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14400:*:*:*:*:*:*14.0 build14400VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14401:*:*:*:*:*:*14.0 build14401VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14410:*:*:*:*:*:*14.0 build14410VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14420:*:*:*:*:*:*14.0 build14420VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14430:*:*:*:*:*:*14.0 build14430VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14440:*:*:*:*:*:*14.0 build14440VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14450:*:*:*:*:*:*14.0 build14450VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14460:*:*:*:*:*:*14.0 build14460VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14470:*:*:*:*:*:*14.0 build14470VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14480:*:*:*:*:*:*14.0 build14480VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14490:*:*:*:*:*:*14.0 build14490VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14500:*:*:*:*:*:*14.0 build14500VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14510:*:*:*:*:*:*14.0 build14510VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14520:*:*:*:*:*:*14.0 build14520VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14530:*:*:*:*:*:*14.0 build14530VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14531:*:*:*:*:*:*14.0 build14531VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14532:*:*:*:*:*:*14.0 build14532VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14533:*:*:*:*:*:*14.0 build14533VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14540:*:*:*:*:*:*14.0 build14540VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14550:*:*:*:*:*:*14.0 build14550VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14560:*:*:*:*:*:*14.0 build14560VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14570:*:*:*:*:*:*14.0 build14570VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14580:*:*:*:*:*:*14.0 build14580VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14590:*:*:*:*:*:*14.0 build14590VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14600:*:*:*:*:*:*14.0 build14600VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14610:*:*:*:*:*:*14.0 build14610VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14620:*:*:*:*:*:*14.0 build14620VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14630:*:*:*:*:*:*14.0 build14630VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14660:*:*:*:*:*:*14.0 build14660VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14670:*:*:*:*:*:*14.0 build14670VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14681:*:*:*:*:*:*14.0 build14681VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14682:*:*:*:*:*:*14.0 build14682VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14683:*:*:*:*:*:*14.0 build14683VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14684:*:*:*:*:*:*14.0 build14684VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14685:*:*:*:*:*:*14.0 build14685VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14690:*:*:*:*:*:*14.0 build14690VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14700:*:*:*:*:*:*14.0 build14700VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14710:*:*:*:*:*:*14.0 build14710VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14071:*:*:*:*:*:* Versions 14.0 build14071 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14072:*:*:*:*:*:* Versions 14.0 build14072 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14073:*:*:*:*:*:* Versions 14.0 build14073 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14080:*:*:*:*:*:* Versions 14.0 build14080 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14090:*:*:*:*:*:* Versions 14.0 build14090 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14100:*:*:*:*:*:* Versions 14.0 build14100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14110:*:*:*:*:*:* Versions 14.0 build14110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14120:*:*:*:*:*:* Versions 14.0 build14120 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14130:*:*:*:*:*:* Versions 14.0 build14130 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14140:*:*:*:*:*:* Versions 14.0 build14140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14150:*:*:*:*:*:* Versions 14.0 build14150 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14160:*:*:*:*:*:* Versions 14.0 build14160 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14170:*:*:*:*:*:* Versions 14.0 build14170 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14180:*:*:*:*:*:* Versions 14.0 build14180 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14190:*:*:*:*:*:* Versions 14.0 build14190 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14200:*:*:*:*:*:* Versions 14.0 build14200 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14210:*:*:*:*:*:* Versions 14.0 build14210 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14220:*:*:*:*:*:* Versions 14.0 build14220 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14230:*:*:*:*:*:* Versions 14.0 build14230 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14240:*:*:*:*:*:* Versions 14.0 build14240 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14250:*:*:*:*:*:* Versions 14.0 build14250 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14260:*:*:*:*:*:* Versions 14.0 build14260 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14261:*:*:*:*:*:* Versions 14.0 build14261 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14262:*:*:*:*:*:* Versions 14.0 build14262 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14270:*:*:*:*:*:* Versions 14.0 build14270 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14280:*:*:*:*:*:* Versions 14.0 build14280 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14290:*:*:*:*:*:* Versions 14.0 build14290 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14300:*:*:*:*:*:* Versions 14.0 build14300 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14310:*:*:*:*:*:* Versions 14.0 build14310 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14330:*:*:*:*:*:* Versions 14.0 build14330 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14331:*:*:*:*:*:* Versions 14.0 build14331 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14332:*:*:*:*:*:* Versions 14.0 build14332 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14340:*:*:*:*:*:* Versions 14.0 build14340 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14350:*:*:*:*:*:* Versions 14.0 build14350 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14360:*:*:*:*:*:* Versions 14.0 build14360 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14361:*:*:*:*:*:* Versions 14.0 build14361 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14370:*:*:*:*:*:* Versions 14.0 build14370 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14380:*:*:*:*:*:* Versions 14.0 build14380 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14390:*:*:*:*:*:* Versions 14.0 build14390 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14400:*:*:*:*:*:* Versions 14.0 build14400 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14401:*:*:*:*:*:* Versions 14.0 build14401 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14410:*:*:*:*:*:* Versions 14.0 build14410 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14420:*:*:*:*:*:* Versions 14.0 build14420 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14430:*:*:*:*:*:* Versions 14.0 build14430 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14440:*:*:*:*:*:* Versions 14.0 build14440 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14450:*:*:*:*:*:* Versions 14.0 build14450 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14460:*:*:*:*:*:* Versions 14.0 build14460 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14470:*:*:*:*:*:* Versions 14.0 build14470 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14480:*:*:*:*:*:* Versions 14.0 build14480 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14490:*:*:*:*:*:* Versions 14.0 build14490 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14500:*:*:*:*:*:* Versions 14.0 build14500 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14510:*:*:*:*:*:* Versions 14.0 build14510 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14520:*:*:*:*:*:* Versions 14.0 build14520 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14530:*:*:*:*:*:* Versions 14.0 build14530 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14531:*:*:*:*:*:* Versions 14.0 build14531 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14532:*:*:*:*:*:* Versions 14.0 build14532 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14533:*:*:*:*:*:* Versions 14.0 build14533 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14540:*:*:*:*:*:* Versions 14.0 build14540 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14550:*:*:*:*:*:* Versions 14.0 build14550 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14560:*:*:*:*:*:* Versions 14.0 build14560 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14570:*:*:*:*:*:* Versions 14.0 build14570 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14580:*:*:*:*:*:* Versions 14.0 build14580 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14590:*:*:*:*:*:* Versions 14.0 build14590 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14600:*:*:*:*:*:* Versions 14.0 build14600 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14610:*:*:*:*:*:* Versions 14.0 build14610 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14620:*:*:*:*:*:* Versions 14.0 build14620 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14630:*:*:*:*:*:* Versions 14.0 build14630 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14660:*:*:*:*:*:* Versions 14.0 build14660 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14670:*:*:*:*:*:* Versions 14.0 build14670 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14681:*:*:*:*:*:* Versions 14.0 build14681 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14682:*:*:*:*:*:* Versions 14.0 build14682 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14683:*:*:*:*:*:* Versions 14.0 build14683 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14684:*:*:*:*:*:* Versions 14.0 build14684 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14685:*:*:*:*:*:* Versions 14.0 build14685 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14690:*:*:*:*:*:* Versions 14.0 build14690 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14700:*:*:*:*:*:* Versions 14.0 build14700 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_applications_manager:14.0:build14710:*:*:*:*:*:* Versions 14.0 build14710 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-14008
  2. 2026-10-03 Alias added: GHSA-5f59-43c8-2pqw

References

Exploit 1

Advisory 2

  • TI-2018-05713 A remote code execution issue was discovered in Zoho ManageEngine Applications Manager… CVSS 3.0CRITICAL 9.8
  • TI-2014-06533 The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications… CVSS 3.1HIGH 7.5
  • TI-2023-12889 Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager… CVSS 3.1MEDIUM 6.1
  • TI-2018-09364 A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x… CVSS 3.0CRITICAL 9.8
  • TI-2020-12793 Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated… CVSS 3.1HIGH 8.8
  • TI-2020-12540 Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated… CVSS 3.1HIGH 8.8
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences