Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-6043

EPSS 4.85% · P90
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-6043

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ZOHO ManageEngine EventLog Analyzer 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ZOHO ManageEngine EventLog Analyzer是美国卓豪（ZOHO）公司的一套系统、事件日志分析软件。该软件能够对全网范围内的主机、服务器、网络设备以及各种应用服务系统等产生的日志，进行全面收集和细致分析。 ZOHO ManageEngine EventLog Analyzer 9.0 build 9002版本和8.2 build 8020版本中存在权限许可和访问控制问题漏洞，该漏洞源于程序没有正确限制对数据库浏览器的访问。远程攻击者可通过向event/runQuery.do页面发
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-6043

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-6043

请登录查看更多情报信息。

Same Patch Batch · n/a · 2014-09-11 · 45 CVEs total

CVE-2014-5868Android Cisco Technical Support应用程序加密问题漏洞
CVE-2014-5871Android Piwik Mobile 2应用程序加密问题漏洞
CVE-2014-5870Android Kmart应用程序加密问题漏洞
CVE-2014-5872Android SafeNetMobile Pass应用程序加密问题漏洞
CVE-2014-5875Android Sylphone应用程序加密问题漏洞
CVE-2014-5876Android WD My Cloud应用程序加密问题漏洞
CVE-2014-5877Android TV Guide应用程序加密问题漏洞
CVE-2014-5878Android ium应用程序加密问题漏洞
CVE-2014-2624HP Network Node Manager i 安全漏洞
CVE-2014-5874Android SplashID应用程序加密问题漏洞
CVE-2014-5869Android CNNMoney Portfolio应用程序加密问题漏洞
CVE-2014-5867Android Capital One Spark Pay应用程序加密问题漏洞
CVE-2014-5866Android CA DMV应用程序加密问题漏洞
CVE-2014-5865Android Ask.com应用程序加密问题漏洞
CVE-2014-5864Android Swish payments应用程序加密问题漏洞
CVE-2014-5863Android mpang.gp应用程序加密问题漏洞
CVE-2014-6241TYPO3 wt_directory扩展SQL注入漏洞
CVE-2014-6240TYPO3 Google Sitemap扩展跨站脚本漏洞
CVE-2014-6239TYPO3 Address visualization with Google Maps SQL注入漏洞
CVE-2014-6238TYPO3 Akronymmanager扩展跨站脚本漏洞

Showing top 20 of 45 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2014-6043

No comments yet

Leave a comment