CVE-2017-11557: Zohocorp ManageEngine Applications Manager

Medium severity, CVSS 5.3. EPSS: 3.7% chance of exploitation in the next 30 days.

An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environment via a userconfiguration.do?method=editUser request.

Affected products

• Zohocorp ManageEngine Applications Manager: version 12.3 only

Published 2019-05-23. Last modified 2026-06-17.