CVE-2024-6748CWE-89

SQL Injection

High · published July 29, 2024

CVSS v3.1

8.3

EPSS

24%

Percentile

97.8

In the wild

Unconfirmed

What it is

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring.

The record

Technical detail

CVSS v3.1: 8.3 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0: Not supplied
EPSS: 0.23784 · 97.8th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2024-07-29T16:20Z

EPSS history

Timeline

29 JUL 16:20Z
SQL Injection
cvelistv5