CVE-2017-11738: SQL Injection
Published May 23, 2019
·Updated
In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack.
Affected Software
1 affected component
ZohoCorp ManageEngine Applications Manager=13.1-13100
Event History
May 23, 2019
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
Description
Frequently Asked Questions
1
What is CVE-2017-11738?
CVE-2017-11738 is a vulnerability in Zoho ManageEngine Application Manager that allows for a Time-based Blind SQL Injection attack.
2
How severe is CVE-2017-11738?
CVE-2017-11738 has a severity rating of 8.1, which is considered high.
3
How does CVE-2017-11738 affect Zoho ManageEngine Application Manager?
CVE-2017-11738 affects Zoho ManageEngine Application Manager versions prior to 14.6 Build 14660.
4
What is the affected version of Zoho ManageEngine Application Manager?
The affected version of Zoho ManageEngine Application Manager is 13.1-13100.
5
Is there a fix available for CVE-2017-11738?
Yes, the fix for CVE-2017-11738 is to update Zoho ManageEngine Application Manager to version 14.6 Build 14660 or later.