Zohocorp ManageEngine Eventlog Analyzer and Log360 versions before 13062 allow an authenticated attacker to trigger arbitrary code execution through the Log Forward option. The flaw is a classic operating‑system command injection (CWE‑78) that can compromise the confidentiality, integrity, and availability of the affected system. Once the attacker authenticates, they can run arbitrary commands with the privileges of the application.

The vulnerability affects Zohocorp ManageEngine Eventlog Analyzer and Log360. All releases prior to version 13062 are impacted. Users should verify their deploy‑ed versions against this threshold and apply the vendor's fix when it becomes available.

With a CVSS score of 8.7 the flaw is considered high severity. The EPSS score is currently unavailable, and the issue is not listed in the CISA KEV catalog, so public exploit evidence is not reported. However, the attack requires valid credentials. Based on the description, it is inferred that compromised accounts or default credentials significantly raise the likelihood of exploitation. An attacker can leverage the Log Forward feature to execute commands on the host. Organizations should treat this as a critical priority.