CVE-2019-11678: SQL Injection
Published May 2, 2019
·Updated
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.
Affected Software
33 affected components
ZohoCorp Manageengine Firewall Analyzer=7.2-7020
ZohoCorp Manageengine Firewall Analyzer=7.2-7021
ZohoCorp Manageengine Firewall Analyzer=7.4-7400
ZohoCorp Manageengine Firewall Analyzer=7.6-7600
ZohoCorp Manageengine Firewall Analyzer=8.0-8000
ZohoCorp Manageengine Firewall Analyzer=8.1-8110
ZohoCorp Manageengine Firewall Analyzer=8.3-8300
ZohoCorp Manageengine Firewall Analyzer=8.5-8500
ZohoCorp Manageengine Firewall Analyzer=12.0-12000
ZohoCorp Manageengine Firewall Analyzer=12.2-12200
ZohoCorp Manageengine Firewall Analyzer=12.3-12300
ZohoCorp Manageengine Firewall Analyzer=12.3-123008
ZohoCorp Manageengine Firewall Analyzer=12.3-123027
ZohoCorp Manageengine Firewall Analyzer=12.3-123045
ZohoCorp Manageengine Firewall Analyzer=12.3-123057
ZohoCorp Manageengine Firewall Analyzer=12.3-123064
ZohoCorp Manageengine Firewall Analyzer=12.3-123070
ZohoCorp Manageengine Firewall Analyzer=12.3-123083
ZohoCorp Manageengine Firewall Analyzer=12.3-123092
ZohoCorp Manageengine Firewall Analyzer=12.3-123126
ZohoCorp Manageengine Firewall Analyzer=12.3-123129
ZohoCorp Manageengine Firewall Analyzer=12.3-123137
ZohoCorp Manageengine Firewall Analyzer=12.3-123151
ZohoCorp Manageengine Firewall Analyzer=12.3-123156
ZohoCorp Manageengine Firewall Analyzer=12.3-123164
ZohoCorp Manageengine Firewall Analyzer=12.3-123169
ZohoCorp Manageengine Firewall Analyzer=12.3-123177
ZohoCorp Manageengine Firewall Analyzer=12.3-123182
ZohoCorp Manageengine Firewall Analyzer=12.3-123185
ZohoCorp Manageengine Firewall Analyzer=12.3-123186
ZohoCorp Manageengine Firewall Analyzer=12.3-123194
ZohoCorp Manageengine Firewall Analyzer=12.3-123197
ZohoCorp Manageengine Firewall Analyzer=12.3-123208
Event History
May 2, 2019
CVE Published
via MITRE·01:06 PM
Data Sourced
via MITRE·01:06 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-11678.
2
What is the affected software for this vulnerability?
The affected software for this vulnerability is Zoho ManageEngine Firewall Analyzer.
3
What is the severity of CVE-2019-11678?
The severity of CVE-2019-11678 is critical.
4
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-89.
5
How can I fix the vulnerability CVE-2019-11678?
To fix the vulnerability CVE-2019-11678, update Zoho ManageEngine Firewall Analyzer to version 12.3 Build 123218 or later.