CVE-2020-28679: SQL Injection

Published Jan 10, 2022
·
Updated

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.

Affected Software

157 affected components
ZohoCorp ManageEngine Applications Manager=11.0-build11010
ZohoCorp ManageEngine Applications Manager=11.0-build11020
ZohoCorp ManageEngine Applications Manager=11.0-build11030
ZohoCorp ManageEngine Applications Manager=11.0-build11040
ZohoCorp ManageEngine Applications Manager=11.0-build11100
ZohoCorp ManageEngine Applications Manager=11.1-build11110
ZohoCorp ManageEngine Applications Manager=11.2-build11200
ZohoCorp ManageEngine Applications Manager=11.2-build11210
ZohoCorp ManageEngine Applications Manager=11.2-build11220
ZohoCorp ManageEngine Applications Manager=11.3-build11300
ZohoCorp ManageEngine Applications Manager=11.4-build11410
ZohoCorp ManageEngine Applications Manager=11.5-build11520
ZohoCorp ManageEngine Applications Manager=11.6-build11610
ZohoCorp ManageEngine Applications Manager=11.7-build11700
ZohoCorp ManageEngine Applications Manager=11.8-build11800
ZohoCorp ManageEngine Applications Manager=11.9-build11900
ZohoCorp ManageEngine Applications Manager=11.9-build11912
ZohoCorp ManageEngine Applications Manager=12.0-build12000
ZohoCorp ManageEngine Applications Manager=12.0-build12010
ZohoCorp ManageEngine Applications Manager=12.0-build12020
ZohoCorp ManageEngine Applications Manager=12.1-build12100
ZohoCorp ManageEngine Applications Manager=12.1-build12120
ZohoCorp ManageEngine Applications Manager=12.2-build12200
ZohoCorp ManageEngine Applications Manager=12.2-build12210
ZohoCorp ManageEngine Applications Manager=12.3-build12300
ZohoCorp ManageEngine Applications Manager=12.5-build12500
ZohoCorp ManageEngine Applications Manager=12.6-build12600
ZohoCorp ManageEngine Applications Manager=12.7-build12700
ZohoCorp ManageEngine Applications Manager=12.7-build12710
ZohoCorp ManageEngine Applications Manager=12.8-build12810
ZohoCorp ManageEngine Applications Manager=12.9-build12900
ZohoCorp ManageEngine Applications Manager=13.0-build13000
ZohoCorp ManageEngine Applications Manager=13.1-build13100
ZohoCorp ManageEngine Applications Manager=13.2-build13200
ZohoCorp ManageEngine Applications Manager=13.2-build13210
ZohoCorp ManageEngine Applications Manager=13.3-build13300
ZohoCorp ManageEngine Applications Manager=13.4-build13400
ZohoCorp ManageEngine Applications Manager=13.4-build13410
ZohoCorp ManageEngine Applications Manager=13.4-build13420
ZohoCorp ManageEngine Applications Manager=13.4-build13430
ZohoCorp ManageEngine Applications Manager=13.4-build13440
ZohoCorp ManageEngine Applications Manager=13.4-build13450
ZohoCorp ManageEngine Applications Manager=13.5-build13500
ZohoCorp ManageEngine Applications Manager=13.5-build13510
ZohoCorp ManageEngine Applications Manager=13.5-build13520
ZohoCorp ManageEngine Applications Manager=13.5-build13530
ZohoCorp ManageEngine Applications Manager=13.5-build13540
ZohoCorp ManageEngine Applications Manager=13.5-build13550
ZohoCorp ManageEngine Applications Manager=13.5-build13560
ZohoCorp ManageEngine Applications Manager=13.5-build13570
ZohoCorp ManageEngine Applications Manager=13.5-build13580
ZohoCorp ManageEngine Applications Manager=13.5-build13590
ZohoCorp ManageEngine Applications Manager=13.5-build13591
ZohoCorp ManageEngine Applications Manager=13.6-build13600
ZohoCorp ManageEngine Applications Manager=13.6-build13610
ZohoCorp ManageEngine Applications Manager=13.6-build13620
ZohoCorp ManageEngine Applications Manager=13.6-build13630
ZohoCorp ManageEngine Applications Manager=13.6-build13640
ZohoCorp ManageEngine Applications Manager=13.6-build13650
ZohoCorp ManageEngine Applications Manager=13.6-build13660
ZohoCorp ManageEngine Applications Manager=13.6-build13670
ZohoCorp ManageEngine Applications Manager=13.6-build13680
ZohoCorp ManageEngine Applications Manager=13.6-build13690
ZohoCorp ManageEngine Applications Manager=13.7-build13700
ZohoCorp ManageEngine Applications Manager=13.7-build13710
ZohoCorp ManageEngine Applications Manager=13.7-build13720
ZohoCorp ManageEngine Applications Manager=13.7-build13730
ZohoCorp ManageEngine Applications Manager=13.7-build13740
ZohoCorp ManageEngine Applications Manager=13.7-build13750
ZohoCorp ManageEngine Applications Manager=13.7-build13760
ZohoCorp ManageEngine Applications Manager=13.7-build13770
ZohoCorp ManageEngine Applications Manager=13.7-build13780
ZohoCorp ManageEngine Applications Manager=13.7-build13790
ZohoCorp ManageEngine Applications Manager=13.8-build13800
ZohoCorp ManageEngine Applications Manager=13.8-build13810
ZohoCorp ManageEngine Applications Manager=13.8-build13820
ZohoCorp ManageEngine Applications Manager=13.8-build13830
ZohoCorp ManageEngine Applications Manager=13.8-build13831
ZohoCorp ManageEngine Applications Manager=13.8-build13840
ZohoCorp ManageEngine Applications Manager=13.8-build13850
ZohoCorp ManageEngine Applications Manager=13.8-build13860
ZohoCorp ManageEngine Applications Manager=13.8-build13870
ZohoCorp ManageEngine Applications Manager=13.8-build13880
ZohoCorp ManageEngine Applications Manager=13.8-build13890
ZohoCorp ManageEngine Applications Manager=13.9-build13900
ZohoCorp ManageEngine Applications Manager=13.9-build13910
ZohoCorp ManageEngine Applications Manager=13.9-build13920
ZohoCorp ManageEngine Applications Manager=13.9-build13930
ZohoCorp ManageEngine Applications Manager=13.9-build13940
ZohoCorp ManageEngine Applications Manager=13.9-build13950
ZohoCorp ManageEngine Applications Manager=13.9-build13960
ZohoCorp ManageEngine Applications Manager=13.9-build13970
ZohoCorp ManageEngine Applications Manager=13.9-build13980
ZohoCorp ManageEngine Applications Manager=13.9-build13990
ZohoCorp ManageEngine Applications Manager=14.0-build14000
ZohoCorp ManageEngine Applications Manager=14.0-build14010
ZohoCorp ManageEngine Applications Manager=14.0-build14020
ZohoCorp ManageEngine Applications Manager=14.0-build14030
ZohoCorp ManageEngine Applications Manager=14.0-build14040
ZohoCorp ManageEngine Applications Manager=14.0-build14050
ZohoCorp ManageEngine Applications Manager=14.0-build14060
ZohoCorp ManageEngine Applications Manager=14.0-build14070
ZohoCorp ManageEngine Applications Manager=14.0-build14071
ZohoCorp ManageEngine Applications Manager=14.0-build14072
ZohoCorp ManageEngine Applications Manager=14.0-build14073
ZohoCorp ManageEngine Applications Manager=14.0-build14080
ZohoCorp ManageEngine Applications Manager=14.0-build14090
ZohoCorp ManageEngine Applications Manager=14.1-build14100
ZohoCorp ManageEngine Applications Manager=14.1-build14110
ZohoCorp ManageEngine Applications Manager=14.1-build14120
ZohoCorp ManageEngine Applications Manager=14.1-build14130
ZohoCorp ManageEngine Applications Manager=14.1-build14140
ZohoCorp ManageEngine Applications Manager=14.1-build14150
ZohoCorp ManageEngine Applications Manager=14.1-build14160
ZohoCorp ManageEngine Applications Manager=14.1-build14170
ZohoCorp ManageEngine Applications Manager=14.1-build14180
ZohoCorp ManageEngine Applications Manager=14.1-build14190
ZohoCorp ManageEngine Applications Manager=14.2-build14200
ZohoCorp ManageEngine Applications Manager=14.2-build14210
ZohoCorp ManageEngine Applications Manager=14.2-build14220
ZohoCorp ManageEngine Applications Manager=14.2-build14230
ZohoCorp ManageEngine Applications Manager=14.2-build14240
ZohoCorp ManageEngine Applications Manager=14.2-build14250
ZohoCorp ManageEngine Applications Manager=14.2-build14260
ZohoCorp ManageEngine Applications Manager=14.2-build14261
ZohoCorp ManageEngine Applications Manager=14.2-build14262
ZohoCorp ManageEngine Applications Manager=14.2-build14270
ZohoCorp ManageEngine Applications Manager=14.2-build14280
ZohoCorp ManageEngine Applications Manager=14.2-build14290
ZohoCorp ManageEngine Applications Manager=14.3-build14300
ZohoCorp ManageEngine Applications Manager=14.3-build14310
ZohoCorp ManageEngine Applications Manager=14.3-build14330
ZohoCorp ManageEngine Applications Manager=14.3-build14331
ZohoCorp ManageEngine Applications Manager=14.3-build14332
ZohoCorp ManageEngine Applications Manager=14.3-build14340
ZohoCorp ManageEngine Applications Manager=14.3-build14350
ZohoCorp ManageEngine Applications Manager=14.3-build14360
ZohoCorp ManageEngine Applications Manager=14.3-build14361
ZohoCorp ManageEngine Applications Manager=14.3-build14370
ZohoCorp ManageEngine Applications Manager=14.3-build14380
ZohoCorp ManageEngine Applications Manager=14.3-build14390
ZohoCorp ManageEngine Applications Manager=14.4-build14400
ZohoCorp ManageEngine Applications Manager=14.4-build14401
ZohoCorp ManageEngine Applications Manager=14.4-build14410
ZohoCorp ManageEngine Applications Manager=14.4-build14420
ZohoCorp ManageEngine Applications Manager=14.4-build14430
ZohoCorp ManageEngine Applications Manager=14.4-build14440
ZohoCorp ManageEngine Applications Manager=14.4-build14450
ZohoCorp ManageEngine Applications Manager=14.4-build14460
ZohoCorp ManageEngine Applications Manager=14.4-build14470
ZohoCorp ManageEngine Applications Manager=14.4-build14480
ZohoCorp ManageEngine Applications Manager=14.4-build14490
ZohoCorp ManageEngine Applications Manager=14.5-build14500
ZohoCorp ManageEngine Applications Manager=14.5-build14510
ZohoCorp ManageEngine Applications Manager=14.5-build14520
ZohoCorp ManageEngine Applications Manager=14.5-build14530
ZohoCorp ManageEngine Applications Manager=14.5-build14540

Event History

Jan 10, 2022
CVE Published
via MITRE·05:47 PM
Data Sourced
via MITRE·05:47 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-28679?

CVE-2020-28679 has been classified as a high severity vulnerability due to its potential for SQL injection by authenticated attackers.

2

How do I fix CVE-2020-28679?

To fix CVE-2020-28679, you need to update your Zoho ManageEngine Applications Manager to build version 14550 or higher.

3

What systems are affected by CVE-2020-28679?

CVE-2020-28679 affects multiple builds of Zoho ManageEngine Applications Manager, specifically versions before build 14550.

4

Who can exploit CVE-2020-28679?

Authenticated attackers with access to the showReports module of the affected software can exploit CVE-2020-28679.

5

What type of vulnerability is CVE-2020-28679?

CVE-2020-28679 is a SQL injection vulnerability that allows attackers to manipulate database queries.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203