CVE-2020-8592: Eginnovations Eg Manager

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).

Affected products

• Eginnovations Eg Manager: version 7.1.2 only

Published 2020-02-03. Last modified 2026-06-17.