CVE-2024-5678

zohocorp manageengine applications manager

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-5678

Katalog CVE

CVSS 4.7 · Medium EPSS 2,6%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada zohocorp manageengine applications manager. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

Rincian

Terbit di NVD
1 Agustus 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
4.7 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
EPSS (30 hari)
2,6% peluang dieksploitasi; lebih tinggi dari 84,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine applications manager Semua versi sebelum 16.8
zohocorp manageengine applications manager Versi 16.8
zohocorp manageengine applications manager Versi 16.8 build16800
zohocorp manageengine applications manager Versi 16.8 build16810
zohocorp manageengine applications manager Versi 16.8 build16820
zohocorp manageengine applications manager Versi 16.8 build16830
zohocorp manageengine applications manager Versi 16.8 build16840
zohocorp manageengine applications manager Versi 16.8 build16841
zohocorp manageengine applications manager Versi 16.8 build16842
zohocorp manageengine applications manager Versi 16.8 build16843
zohocorp manageengine applications manager Versi 17.0
zohocorp manageengine applications manager Versi 17.0 build170000
zohocorp manageengine applications manager Versi 17.0 build170001
zohocorp manageengine applications manager Versi 17.0 build170100
zohocorp manageengine applications manager Versi 17.0 build170200
zohocorp manageengine applications manager Versi 17.0 build170300
zohocorp manageengine applications manager Versi 17.0 build170400
zohocorp manageengine applications manager Versi 17.0 build170500
zohocorp manageengine applications manager Versi 17.0 build170600
zohocorp manageengine applications manager Versi 17.0 build170700
zohocorp manageengine applications manager Versi 17.0 build170800
zohocorp manageengine applications manager Versi 17.0 build170900

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.