Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_applications_manager:13.0:*:*:*:*:*:*:*

part: a version: 13.0 update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Applications Manager (49d485f6-953f-5232-b32c-ce1df3e28335)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13050 vulnerable 2026-06-08 05:10:42.247401 Details available
A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_security_check POST request.
Published: 2018-07-02T11:00:00.000Z
Updated: 2024-08-05T08:52:49.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16851 vulnerable 2026-06-08 05:09:01.129556 Details available
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter.
Published: 2017-11-16T17:00:00.000Z
Updated: 2024-08-05T20:35:21.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16850 vulnerable 2026-06-08 05:09:01.129288 Details available
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action.
Published: 2017-11-16T17:00:00.000Z
Updated: 2024-08-05T20:35:21.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16849 vulnerable 2026-06-08 05:09:01.129013 Details available
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter.
Published: 2017-11-16T17:00:00.000Z
Updated: 2024-08-05T20:35:21.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16848 vulnerable 2026-06-08 05:09:01.128746 Details available
Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.
Published: 2017-11-16T17:00:00.000Z
Updated: 2024-08-05T20:35:21.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16847 vulnerable 2026-06-08 05:09:01.128482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16846 vulnerable 2026-06-08 05:09:01.128195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16543 vulnerable 2026-06-08 05:09:00.481359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-16542 vulnerable 2026-06-08 05:09:00.480928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9498 vulnerable 2026-06-08 05:08:24.006404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9491 vulnerable 2026-06-08 05:08:23.994845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9489 vulnerable 2026-06-08 05:08:23.993765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.