CVE-2018-16364
First published: Wed Sep 26 2018(Updated: )
A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp ManageEngine Applications Manager | =13.7 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13700 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13710 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13720 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13730 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13750 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13760 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13770 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13780 | |
| Zohocorp ManageEngine Applications Manager | =13.7-build13790 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-16364?
CVE-2018-16364 is a serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740.
How does CVE-2018-16364 allow for remote code execution?
CVE-2018-16364 allows for remote code execution on Windows via a payload on an SMB share.
What is the severity of CVE-2018-16364?
CVE-2018-16364 has a severity rating of 8.1 (High).
Which software versions are affected by CVE-2018-16364?
Zoho ManageEngine Applications Manager versions 13.7 to build 13740 are affected by CVE-2018-16364.
How can I fix CVE-2018-16364?
To fix CVE-2018-16364, users should update to Zoho ManageEngine Applications Manager build 13740 or later.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/zohocorp
- canonical/zohocorp manageengine applications manager
- version/zohocorp manageengine applications manager/13.7
- version/zohocorp manageengine applications manager/13.7-build13700
- version/zohocorp manageengine applications manager/13.7-build13710
- version/zohocorp manageengine applications manager/13.7-build13720
- version/zohocorp manageengine applications manager/13.7-build13730
- version/zohocorp manageengine applications manager/13.7-build13750
- version/zohocorp manageengine applications manager/13.7-build13760
- version/zohocorp manageengine applications manager/13.7-build13770
- version/zohocorp manageengine applications manager/13.7-build13780
- version/zohocorp manageengine applications manager/13.7-build13790