Lucene search
+L

215 matches found

OSV
OSV
added 2024/08/30 5:15 p.m.3 views

CVE-2024-6204

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.1CVSS5.8AI score0.01958EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/30 5:15 p.m.27 views

CVE-2024-6204

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS0.01958EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/30 5:10 p.m.29 views

CVE-2024-6204 SQL injection

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS0.01958EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/30 5:10 p.m.60 views

CVE-2024-6204

Product affected: Zohocorp ManageEngine Exchange Reporter Plus. Vulnerability: SQL Injection in the reports module. Affected versions: before 5715. Root cause / details: SQL injection vulnerability in the reports module (no further technical specifics provided in the cited documents). Impact (as ...

8.3CVSS8.3AI score0.01958EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/30 5:10 p.m.28 views

CVE-2024-6204 SQL injection

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...

8.3CVSS7.3AI score0.01958EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/30 12:0 a.m.5 views

ZOHO ManageEngine Exchange Reporter Plus SQL注入漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus versions prior to 5715, which stems from susceptibility to SQL injection attacks...

8.3CVSS7.8AI score0.01958EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.9 views

The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, which is related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

8.7CVSS5.9AI score0.03052EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/26 6:15 p.m.26 views

CVE-2024-38871

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...

8.8CVSS0.03116EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/26 6:15 p.m.6 views

CVE-2024-38872

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.8CVSS5.8AI score0.03052EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/26 6:15 p.m.37 views

CVE-2024-38872

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.8CVSS0.03052EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/26 5:30 p.m.18 views

CVE-2024-38872 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.3CVSS7.7AI score0.03052EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/26 5:30 p.m.42 views

CVE-2024-38872 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

8.3CVSS0.03052EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/26 5:30 p.m.65 views

CVE-2024-38872

CVE-2024-38872 concerns Zohocorp ManageEngine Exchange Reporter Plus, with affected versions 5717 and below. The issue arises in the monitoring module, where the SQL query structure is not properly protected, enabling an authenticated SQL injection vulnerability. Exploitation would require valid ...

8.8CVSS8.6AI score0.03052EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/26 5:29 p.m.19 views

CVE-2024-38871 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...

8.3CVSS8.8AI score0.03116EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/26 5:29 p.m.33 views

CVE-2024-38871 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...

8.3CVSS0.03116EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/26 5:29 p.m.68 views

CVE-2024-38871

CVE-2024-38871 affects ManageEngine Exchange Reporter Plus; versions 5717 and below are vulnerable to an authenticated SQL injection in the reports module. The root cause is a lack of protection against SQL query structure attacks in that component, enabling an attacker with valid credentials to ...

8.8CVSS8.6AI score0.03116EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/26 12:0 a.m.7 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

8.8CVSS7.8AI score0.03052EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/26 12:0 a.m.4 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

8.8CVSS7.8AI score0.03116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/15 12:0 a.m.6 views

PT-2024-5296

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below Description The issue is related to the monitoring module of Zohocorp ManageEngine Exchange Reporter Plus, where the software fails to properly protect the SQL query structur...

8.8CVSS7.7AI score0.03052EPSS
SaveExploits0References8
OSV
OSV
added 2024/02/16 3:15 p.m.9 views

CVE-2024-21775

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...

8.8CVSS5.8AI score0.05013EPSS
SaveExploits0References1
Rows per page
Query Builder