What’s Vulnerable › Vulnerabilities
CVE-2020-14008
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 39.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-09-04 · updated 2026-06-17
- Weakness: CWE-434
Description
Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.
Affected products
- Zohocorp ManageEngine Applications Manager: through 13.0; 14.0, 14.0-build14000, 14.0-build14010, 14.0-build14020, 14.0-build14030, 14.0-build14040 (+80)
References
- http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
- https://www.manageengine.com
- https://www.manageengine.com/products/applications_manager/issues.html#14730
- http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
- https://www.manageengine.com
- https://www.manageengine.com/products/applications_manager/issues.html#14730
Get alerted when CVE-2020-14008 or the next vulnerability affects your stack