Full title: ManageEngine Applications Manager Authenticated Remote Code Execution Exploit Category: web applications Platform: java ManageEngine Applications Manager authenticated remote code execution exploit that leverages the newInstance() and loadClass() methods being used by the "WeblogicReference", when attempting a Credential Test for a new Monitor. Versions below 14720 are affected. # 0day.today @ http://0day.today/