CVE-2024-41140CWE-863

Improper Authorization

High · published January 29, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in the update user function.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00930 · 60.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-01-29T11:14Z
EPSS history
Timeline
  • 29 JAN 11:14Z
    Improper Authorization
    cvelistv5