CVE-2024-9459

Published Nov 5, 2024

Last updated 11 days ago

Overview

Description
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.
Source
0fc0942c-577d-436f-ae8e-945763c79b02
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

nvd@nist.gov
CWE-89
0fc0942c-577d-436f-ae8e-945763c79b02
CWE-89

Social media

Hype score
Not currently trending

Configurations