CVE-2019-19774

CVE-2019-19774 is a high-severity vulnerability in Zohocorp Manageengine Eventlog Analyzer with a CVSS 3.x base score of 8.8. Its EPSS exploit-prediction score of 13% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Description

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data stored in the database, and recover the MD5 hashes of the accounts used to authenticate the ManageEngine platform to the managed machines on the network (most often administrative accounts). Specifically, this bypasses these restrictions: a query cannot mention password, and a query result cannot have a password column.

Frequently asked questions

What is CVE-2019-19774?
An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data stored in the database, and recover the MD5 hashes of the accounts used to authenticate the ManageEngine platform to the managed machines on the network (most often administrative accounts). Specifically, this bypasses these restrictions: a query cannot mention password, and a query result cannot have a password column.
How severe is CVE-2019-19774?
CVE-2019-19774 has a CVSS 3.x base score of 8.8, rated high severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2019-19774 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 13% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2019-19774?
CVE-2019-19774 affects Zohocorp Manageengine Eventlog Analyzer. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2019-19774?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2019-19774 published?
CVE-2019-19774 was published on 2019-12-13 and last updated on 2026-06-17.

References

Affected products (1)

More vulnerabilities in Zohocorp Manageengine Eventlog Analyzer

All CVEs affecting Zohocorp Manageengine Eventlog Analyzer →