CVE-2019-19799

MEDIUM

Zohocorp Manageengine Applications Manager - Missing Authentication

Title source: rule

Description

Zoho ManageEngine Applications Manager before 14600 allows a remote unauthenticated attacker to disclose license related information via WieldFeedServlet servlet.

Exploits (1)

gitlab SUSPICIOUS

by eLeN3Re · poc

https://gitlab.com/eLeN3Re/cve-2019-19799

View Code ZIP pw:eip

References (2)

[Exploit, Third Party Advisory] https://gitlab.com/eLeN3Re/cve-2019-19799

[Vendor Advisory] https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2019-19799.html

Scores

CVSS v3 5.3

EPSS 0.0690

EPSS Percentile 91.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-306

Status published

Products (2)

zohocorp/manageengine_applications_manager 14.5 (10 CPE variants)

zohocorp/manageengine_applications_manager < 14.5

Published Mar 13, 2020

Tracked Since Feb 18, 2026