AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-20474

MEDIUM · CVSS 4.3 EPSS 1.44%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-02-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-20474
Severity
MEDIUM
CVSS
4.3
EPSS
1.44%

Original NVD Description

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (read-only access) to use and abuse it. One of the abuses allows performing network and port scan operations of the localhost or the hosts on the same network segment, aka SSRF.