CVE-2020-15594
Last modified
CVE-2020-15594 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product is deployed.. EPSS estimates a 1.77% chance of exploitation in the next 30 days.
Description
An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product is deployed.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | Manageengine Application Control Plus | < 10.0.511 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-15594?
How severe is CVE-2020-15594?
How do I fix CVE-2020-15594?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-15589A design issue was discovered in GetInternetRequestHandle, I…8.1
- CVE-2020-1559<p>An elevation of privilege vulnerability exists when the W…7.8
- CVE-2020-15590A vulnerability in the Private Internet Access (PIA) VPN Cli…7.5
- CVE-2020-15591fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20…9.8
- CVE-2020-15592SteelCentral Aternity Agent before 11.0.0.120 on Windows all…7.5
- CVE-2020-15593SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles…7.8
- CVE-2020-15595An issue was discovered in Zoho Application Control Plus bef…4.3
- CVE-2020-15596The ALPS ALPINE touchpad driver before 8.2206.1717.634, as u…6.7
- CVE-2020-15597SOPlanning 1.46.01 allows persistent XSS via the Project Nam…5.4
- CVE-2020-15598Trustwave ModSecurity 3.x through 3.0.4 allows denial of ser…7.5
- CVE-2020-15599Victor CMS through 2019-02-28 allows XSS via the register.ph…6.1
- CVE-2020-1560A remote code execution vulnerability exists in the way that…7.8
Are you affected by CVE-2020-15594?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST