Unscored severity · published Feb 14, 2012
CVE-2012-1063
Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Applications Manager · Manageengine
10.0; 10.1; 10.2; 10.3; 9.1; 9.2; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1063
Exploit
http://packetstormsecurity.org/files/view/109238/VL-115.txt
www.securityfocus.com
http://www.securityfocus.com/bid/51796
www.vulnerability-lab.com
http://www.vulnerability-lab.com/get_content.php?id=115
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/72831
More from Applications Manager
9.8
CVE-2016-9488
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities
6.5
CVE-2024-41140
Improper Authorization
6.1
CVE-2016-9490
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability
5.4
CVE-2025-27930
Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.
–
CVE-2012-1062
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1)…