CVE-2014-6039

HIGH

Zohocorp Manageengine Eventlog Analyzer - Insufficiently Protected ...

Title source: rule

Description

ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed version 10 Build 10000.

Exploits (1)

exploitdb WRITEUP
by Pedro Ribeiro · textwebappsmultiple
https://www.exploit-db.com/exploits/43893

Scores

CVSS v3 7.5
EPSS 0.8363
EPSS Percentile 99.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (1)

zohocorp/manageengine_eventlog_analyzer < 9.9

Timeline

Published Jan 13, 2020
Tracked Since Feb 18, 2026