CVE-2014-6038

HIGH 7.5CVE-2014-6038 · Published 13/01/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
manageengine eventlog analyzer zohocorp	`≥ 7.0, ≤ 9.9`	No fix yet

Description

Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000.

References

packetstormsecurity.com/files/128996/ManageEngine-EventLog-Analyzer-SQL-Credential-Disclosure.html · Exploit
seclists.org/fulldisclosure/2014/Nov/12 · Mailing List
securityfocus.com/bid/70959 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/98540 · VDB Entry

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free