CVEvulnerability

CVE-2024-38870

3.5 LOW Published 2024-07-17 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-07-17
Last modified
2026-06-17
Assigner
0fc0942c-577d-436f-ae8e-945763c79b02
CVSS 3.1 (0fc0942c-577d-436f-ae8e-945763c79b02)
3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-79

Description

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module.

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References