CVE-2024-5678

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

Score

CVSS 3.1 4.7 Medium

Status

Analyzed - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2024-08-01

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Applications Manager (Manageengine)
• Manageengine Applications Manager (Zohocorp)

References

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2024-5678.html