In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15533
Reference (s):
- https://www.manageengine.com/products/applications_manager/issues.html#v14750
- https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15533.html
- https://www.manageengine.com