Security Advisory
CVE-2018-15168
9.8
CRITICAL
Vulnerability Description
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request.
Published Date
August 8, 2018
Official Source
NIST NVD Advisory