Vulnerability Database

296,772

Total vulnerabilities in the database

CVE-2024-21775

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature.

Published: Feb 16, 2024
Updated: May 4, 2025
CVE: CVE-2024-21775
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_exchange_reporter_plus	5.7-5700	5.7-5700.x
zohocorp / manageengine_exchange_reporter_plus	5.7	5.7.x
zohocorp / manageengine_exchange_reporter_plus	-	5.7
zohocorp / manageengine_exchange_reporter_plus	5.7-5701	5.7-5701.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5702	5.7-5702.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5703	5.7-5703.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5704	5.7-5704.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5705	5.7-5705.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5706	5.7-5706.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5707	5.7-5707.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5708	5.7-5708.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5709	5.7-5709.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5710	5.7-5710.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5711	5.7-5711.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5712	5.7-5712.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5713	5.7-5713.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5714	5.7-5714.x

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-21775.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime