CVE-2024-6204 HIGH

CVE-2024-6204: SQL injection

Vendor Manageengine

Product Exchange Reporter Plus

Weakness CWE-89 · SQLi

Published August 30, 2024

Last update August 30, 2024

CVSS base score

8.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

Key dates

August 30, 2024 CVE published

August 30, 2024 Record updated

External resources

Related vulnerabilities