CVE-2008-0476

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-29 · updated 2026-06-16
Weakness: CWE-287

Description

ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive information and change settings via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

ManageEngine Applications Manager: 8.1_build_8100

References

http://secunia.com/advisories/28332
http://www.securityfocus.com/bid/27443
https://exchange.xforce.ibmcloud.com/vulnerabilities/39915
http://secunia.com/advisories/28332
http://www.securityfocus.com/bid/27443
https://exchange.xforce.ibmcloud.com/vulnerabilities/39915

Get alerted when CVE-2008-0476 or the next vulnerability affects your stack