CVE-2020-8592

CRITICAL 9.8CVE-2020-8592 · Published 03/02/2020 · updated 17/06/2026

In short

CVE-2020-8592 is a CRITICAL (CVSS 9.8) vulnerability affecting eg manager (eginnovations).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eg manager eginnovations	`= 7.1.2`	No fix yet

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.