CVE-2019-19649

CVE-2019-19649

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 9.5%
exploitation probability
9.5%top 5% of all CVEs
observed exploitation
nono source reports it
Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.
Affected products
n/a · n/a