CVE-2020-15595

State: Published
Severity: 4.3 Medium
Published: Sep 29, 2020
Updated: May 30, 2025
Reserved: Jul 7, 2020

Description

An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) allows an attacker to retrieve the entire list of the IP ranges and subnets configured in the product and consequently obtain information about the cartography of the internal networks to which the product has access.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N	mitre

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://excellium-services.com/cert-xlm-advisory/CVE-2020-15595
https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-15595

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.