CVE-2017-16849: SQL Injection
First published: Thu Nov 16 2017(Updated: )
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp ManageEngine Applications Manager | =13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Zoho ManageEngine Applications Manager?
The vulnerability ID for Zoho ManageEngine Applications Manager is CVE-2017-16849.
What is the severity rating of CVE-2017-16849?
The severity rating of CVE-2017-16849 is critical with a severity value of 9.8.
How does CVE-2017-16849 affect Zoho ManageEngine Applications Manager?
CVE-2017-16849 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter in Zoho ManageEngine Applications Manager 13 before build 13530.
What is the affected version of Zoho ManageEngine Applications Manager?
The affected version of Zoho ManageEngine Applications Manager is version 13.0.
How to fix CVE-2017-16849?
To fix CVE-2017-16849, update Zoho ManageEngine Applications Manager to build 13530 or later.
- agent/references
- agent/severity
- agent/type
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/zohocorp
- canonical/zohocorp manageengine applications manager
- version/zohocorp manageengine applications manager/13.0