EDB-43893

PoC

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)

view exploit source exploit_dbtype webappsauthor Pedro Ribeiropublished 2014-11-05catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-6039US	high7.5	68.8% (99th)	Exploit	2020-01-13
ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed version 10 Build 10000.
CVE-2014-6038US	high7.5	72.8% (99th)	Exploit	2020-01-13
Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.