CVE-2024-6204

Published: Aug 30, 2024Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

Products: Zohocorp: Manageengine Exchange Reporter Plus

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Exchange Reporter Plus	Before 5.7
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5700
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5701
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5702
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5703
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5704
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5705
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5706
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5707
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5708
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5709
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5710
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5711
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5712
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5713
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5714

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

Vendor Advisory

No history available yet.