CVE-2018-16364

A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.

Score

CVSS 3.1 8.1 High

Status

Modified - cve@mitre.org

Published

2018-09-26

Last modified

2024-08-05

Weaknesses

CWE-502

Affected products

• Manageengine Applications Manager (Zohocorp)

References

• https://blog.jamesotten.com/post/applications-manager-rce/