Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000.Referenceshttp://packetstormsecurity.com/files/128996/ManageEngine-EventLog-Analyzer-SQL-Credential-Disclosure.htmlhttp://www.securityfocus.com/bid/70959https://exchange.xforce.ibmcloud.com/vulnerabilities/98540http://seclists.org/fulldisclosure/2014/Nov/12
