CVE-2020-27995

9.8 criticalEPSS 8.8%

Critical (9.8) in zohocorp manageengine applications manager. EPSS 8.8% chance of exploitation in the next 30 days.

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 8.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-10-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_applications_manager

References

https://www.manageengine.com/products/applications_manager/issues.html#v14560
https://www.manageengine.com/products/applications_manager/issues.html#v14560

Check your stack JSON