CVE-2019-19650
Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function.
Date published : 2019-12-11
https://www.manageengine.com/products/applications_manager/release-notes.html