GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Thanks to Lukasz Juszczyk for reporting this vulnerability.

3 vulnerability records and advisories credit this contributor.

CVE-2016-9498
ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects
CVE-2016-9491
ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity
CVE-2016-9489
ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass