CVE-2017-11740

CVE-2017-11740 describes a critical vulnerability in Zoho ManageEngine Application Manager 13.1 Build 13100, where an authenticated administrative user can upload and execute malicious scripts. This allows for arbitrary code execution on the remote system by leveraging the alarm-triggered execution functionality. With a CVSS score of 8.8 (High), this vulnerability poses a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been identified, and community discussion is minimal, the potential for a complete system compromise remains high if an attacker gains administrative credentials.