CVE-2019-19475: Zohocorp ManageEngine Applications Manager

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

An issue was discovered in ManageEngine Applications Manager 14 with Build 14360. Integrated PostgreSQL which is built-in in Applications Manager is prone to attack due to lack of file permission security. The malicious users who are in “Authenticated Users” group can exploit privilege escalation and modify PostgreSQL configuration to execute arbitrary command to escalate and gain full system privilege user access and rights over the system.

Affected products

• Zohocorp ManageEngine Applications Manager: version 14.3 only

Published 2020-01-10. Last modified 2026-06-17.