CVE-2017-16542

CVE-2017-16542 describes a post-authentication SQL injection vulnerability in Zoho ManageEngine Applications Manager versions prior to build 13500, specifically exploitable via the 'name' parameter in a 'manageApplications.do?method=insert' request. This vulnerability carries a high CVSS score of 8.8, indicating it can be exploited remotely with low complexity by an authenticated attacker, leading to high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.