CVE-2024-9459

Published: Nov 5, 2024
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-9459" target="_blank" rel="noopener"> CVE-2024-9459
Severity: High
Exploit:

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.

CVSS v3:

CWEs:

OWASP TOP 10:

Software	From	Fixed in
zohocorp / manageengine_exchange_reporter_plus	5.7-5700	5.7-5700.x
zohocorp / manageengine_exchange_reporter_plus	5.7	5.7.x
zohocorp / manageengine_exchange_reporter_plus	-	5.7
zohocorp / manageengine_exchange_reporter_plus	5.7-5701	5.7-5701.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5702	5.7-5702.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5703	5.7-5703.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5704	5.7-5704.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5705	5.7-5705.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5706	5.7-5706.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5707	5.7-5707.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5709	5.7-5709.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5708	5.7-5708.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5710	5.7-5710.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5711	5.7-5711.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5712	5.7-5712.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5717	5.7-5717.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5715	5.7-5715.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5714	5.7-5714.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5713	5.7-5713.x
zohocorp / manageengine_exchange_reporter_plus	5.7-5718	5.7-5718.x