CVE-2014-7866

CVE-2014-7866 describes multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager, IT360, and Social IT Plus. Attackers can exploit these flaws by manipulating parameters in specific servlets to write and execute arbitrary files on affected systems. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing remote unauthenticated attackers to achieve partial confidentiality, integrity, and availability compromise with low attack complexity. While not listed on the KEV catalog, public exploit code exists on ExploitDB, indicating a potential for exploitation. Despite the availability of exploit code, there is no evidence of active exploitation or significant community discussion surrounding this CVE.