CVE-2019-19475

An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications Manager is prone to attack due to lack of file permission security. The malicious users who are in “Authenticated Users” group can exploit privilege escalation and modify PostgreSQL configuration to execute arbitrary command to escalate and gain full system privilege user access and rights over the system.

• CWE-276

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2019-19475.htmlVendor Advisory
• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2019-19475.htmlVendor Advisory

Published

Jan 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19464The CBC Gem application before 9.24.1 for Android and before…5.3
• CVE-2019-19466SCEditor 2.1.3 allows XSS.6.1
• CVE-2019-19468Free Photo Viewer 1.3 allows remote attackers to execute arb…7.8
• CVE-2019-19469In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=…8.8
• CVE-2019-1947A vulnerability in the email message filtering feature of Ci…8.6
• CVE-2019-19470Unsafe usage of .NET deserialization in Named Pipe message p…7.8
• CVE-2019-19479An issue was discovered in OpenSC through 0.19.0 and 0.20.x …5.5
• CVE-2019-1948A vulnerability in Cisco Webex Meetings Mobile (iOS) could a…5.9
• CVE-2019-19480An issue was discovered in OpenSC through 0.19.0 and 0.20.x …4.6
• CVE-2019-19481An issue was discovered in OpenSC through 0.19.0 and 0.20.x …4.6
• CVE-2019-19484Open redirect via parameter ‘p’ in login.php in Centreon (19…6.1
• CVE-2019-19486Local File Inclusion in minPlayCommand.php in Centreon (19.0…6.5