{"id":"CVE-2016-9488","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-9488","generatedAt":"2026-10-28T20:05:26.563Z","title":"ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities.","description":"ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users' password hashes, which are MD5 hashes without salt, and, depending on the database type and its configuration, could also execute operating system commands using SQL queries.","published":"2018-06-05T14:29:00.000Z","lastModified":"2026-06-17T00:56:10.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-89"],"affected":["manageengine/applications manager"],"epss":{"score":0.04617,"percentile":0.91641,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2020-07-26","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":48692,"kind":"exploit","title":"ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection","url":"https://www.exploit-db.com/exploits/48692","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/webapps/48692.py","file":"exploits/java/webapps/48692.py","published":"2020-07-26","added":"2020-07-26","updated":"2020-07-26","author":"aldorm","type":"webapps","platform":"java","port":null,"verified":false,"codes":["CVE-2016-9488"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB and the impact is critical, while EPSS rates exploitation at 4.6%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/158554/ManageEngine-Applications-Manager-13-SQL-Injection.html","source":"cret@cert.org"},{"url":"http://seclists.org/fulldisclosure/2017/Apr/9","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/97394","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"https://packetstormsecurity.com/files/142022/ManageEngine-Applications-Manager-12-13-XSS-SQL-Injection-Code-Execution.html","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9488.html","source":"cret@cert.org"},{"url":"http://packetstormsecurity.com/files/158554/ManageEngine-Applications-Manager-13-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2017/Apr/9","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/97394","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://packetstormsecurity.com/files/142022/ManageEngine-Applications-Manager-12-13-XSS-SQL-Injection-Code-Execution.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9488.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-9488","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}