CVE-2019-19034 is a vulnerability in Zoho Corp Manageengine Assetexplorer
Published on March 23, 2020
Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM privileges.
Products Associated with CVE-2019-19034
Want to know whenever a new CVE is published for Zoho Corp Manageengine Assetexplorer? stack.watch will email you.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.