ManageEngine.Applications.Manager.CVE-2018-16364.Code.Execution

description-logoDescription

This indicates an attack attempt to exploit a Remote Code Execution vulnerability in Zoho ManageEngine Application Manager product.
The vulnerability is due to improper validation of client supplied HTTP request. A remote attacker may be able to exploit this to execute arbitrary code within the context of the target application, via a crafted HTTP request.

affected-products-logoAffected Products

ManageEngine Applications Manager before build 13740.

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the latest update from the vendor.
https://www.manageengine.com/products/applications_manager/service-packs.html

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2023-08-03 25.614 Name:ManageEngine.
AppManager.
CustomFieldsFeed.
Remote.
Code.
Execution:ManageEngine.
Applications.
Manager.
CVE-2018-16364.
Code.
Execution
2019-06-06 14.627 Severity:medium:high
2018-11-22 13.496 Default_action:pass:drop
2018-10-25 13.479