CVE-2014-6043

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict...

6.5 MediumPublic exploit

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000.

Exploit likelihood

12.8%Up 11.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2014-6043
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-6043
Updated: 2026-11-02

EUVDEUVD-2014-5931 No score

Record: EUVD-2014-5931
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r5w4-8j3p-5wm3 No score

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict...

Record: GHSA-r5w4-8j3p-5wm3
Updated: 2026-11-02

Affected products

zohocorp manageengine eventlog analyzer

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)	2014-09-01

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-6043 is a medium vulnerability (CVSS 6.5) in Zohocorp Manageengine Eventlog Analyzer, published September 11, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.8%, the 96th percentile. No source names a fixed version.