ManageEngine Applications Manager <= 14710 - Authenticated Remote Code Execution via JAR Upload
Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.