CVE-2024-5466 HIGH

CVE-2024-5466: Remote Code Execution

Vendor Manageengine
Product OpManager, Remote Monitoring and Management
Weakness CWE-94 · Code injection
Published August 23, 2024
Last update August 23, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.

Key dates

02Disclosure timeline

August 23, 2024 CVE published
August 23, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-13592 Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode CVE-2025-66457 Elysia affected by arbitrary code injection through cookie config CVE-2025-58176 Dive's improper processing of custom urls can lead to Remote Code Execution CVE-2024-5407 Code Injection vulnerability in RhinOS from SaltOS CVE-2024-4261 Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution