What’s Vulnerable › Vulnerabilities

CVE-2015-7387

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 80.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-09-28 · updated 2026-06-17
• Weakness: CWE-89

Description

ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallowed one in the query parameter to event/runQuery.do, as demonstrated by "SELECT 1;INSERT INTO." Fixed in Build 11200.

Affected products

• Zohocorp ManageEngine EventLog Analyzer: through 10.6

References

• http://packetstormsecurity.com/files/133581/ManageEngine-EventLog-Analyzer-10.6-Build-10060-SQL-Query-Execution.html
• http://packetstormsecurity.com/files/133747/ManageEngine-EventLog-Analyzer-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2015/Sep/59
• http://www.rapid7.com/db/modules/exploit/windows/misc/manageengine_eventlog_analyzer_rce
• https://www.exploit-db.com/exploits/38173/
• https://www.exploit-db.com/exploits/38352/
• http://packetstormsecurity.com/files/133581/ManageEngine-EventLog-Analyzer-10.6-Build-10060-SQL-Query-Execution.html
• http://packetstormsecurity.com/files/133747/ManageEngine-EventLog-Analyzer-Remote-Code-Execution.html
• http://seclists.org/fulldisclosure/2015/Sep/59
• http://www.rapid7.com/db/modules/exploit/windows/misc/manageengine_eventlog_analyzer_rce
• https://www.exploit-db.com/exploits/38173/
• https://www.exploit-db.com/exploits/38352/

Get alerted when CVE-2015-7387 or the next vulnerability affects your stack