What’s Vulnerable › Vulnerabilities
CVE-2014-7863
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 83.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-02-08 · updated 2026-06-17
- Weakness: CWE-200
Description
The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to (1) read arbitrary files via the fileName parameter in a copyfile operation or (2) obtain sensitive information via a directory listing in a listdirectory operation to servlet/FailOverHelperServlet.
Affected products
- Zohocorp ManageEngine Applications Manager: through 11.9
- Zohocorp Manageengine It360: through 10.5
- Zohocorp ManageEngine OpManager: from 8 through 11.5
References
- http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html
- http://seclists.org/fulldisclosure/2015/Jan/114
- http://www.securityfocus.com/archive/1/archive/1/534575/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100554
- https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_failservlet.txt
- https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerabilities-in-failoverhelperservlet
- http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html
- http://seclists.org/fulldisclosure/2015/Jan/114
- http://www.securityfocus.com/archive/1/archive/1/534575/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100554
- https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_failservlet.txt
- https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerabilities-in-failoverhelperservlet
Get alerted when CVE-2014-7863 or the next vulnerability affects your stack