Vulnerability in Zohocorp Manageengine_application_control_plus

CVE-2020-15595

An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) allows an attacker to retrieve the entire…

EPSS: 0.022 (80.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

References

Frequently asked questions

What is CVE-2020-15595?
CVE-2020-15595 is a medium-severity vulnerability in Zohocorp Manageengine_application_control_plus. CVSS score: 4.3/10. Published 2020-09-30.
How severe is CVE-2020-15595?
Medium severity. CVSS v3 base score is 4.3 out of 10.