CVE-2024-5678: SQL Injection
First published: Thu Aug 01 2024(Updated: )
Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.
Credit: 0fc0942c-577d-436f-ae8e-945763c79b02
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ManageEngine Applications Manager | <16.8 | |
| ManageEngine Applications Manager | =16.8 | |
| ManageEngine Applications Manager | =16.8-build16800 | |
| ManageEngine Applications Manager | =16.8-build16810 | |
| ManageEngine Applications Manager | =16.8-build16820 | |
| ManageEngine Applications Manager | =16.8-build16830 | |
| ManageEngine Applications Manager | =16.8-build16840 | |
| ManageEngine Applications Manager | =16.8-build16841 | |
| ManageEngine Applications Manager | =16.8-build16842 | |
| ManageEngine Applications Manager | =16.8-build16843 | |
| ManageEngine Applications Manager | =17.0 | |
| ManageEngine Applications Manager | =17.0-build170000 | |
| ManageEngine Applications Manager | =17.0-build170001 | |
| ManageEngine Applications Manager | =17.0-build170100 | |
| ManageEngine Applications Manager | =17.0-build170200 | |
| ManageEngine Applications Manager | =17.0-build170300 | |
| ManageEngine Applications Manager | =17.0-build170400 | |
| ManageEngine Applications Manager | =17.0-build170500 | |
| ManageEngine Applications Manager | =17.0-build170600 | |
| ManageEngine Applications Manager | =17.0-build170700 | |
| ManageEngine Applications Manager | =17.0-build170800 | |
| ManageEngine Applications Manager | =17.0-build170900 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5678?
CVE-2024-5678 has been classified with a severity level that indicates a significant risk due to authenticated admin-only SQL Injection.
How do I fix CVE-2024-5678?
To mitigate CVE-2024-5678, upgrade your Zohocorp ManageEngine Applications Manager to a version higher than 17.0.
Which versions of Zohocorp ManageEngine Applications Manager are affected by CVE-2024-5678?
CVE-2024-5678 affects all versions up to and including 17.0, specifically those below 170900.
What type of attack does CVE-2024-5678 involve?
CVE-2024-5678 involves an authenticated admin-only SQL Injection vulnerability within the Create Monitor feature.
Is CVE-2024-5678 easy to exploit?
Exploitation of CVE-2024-5678 requires administrative access, making it less accessible to unauthorized users.
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/zohocorp
- canonical/manageengine applications manager
- version/manageengine applications manager/16.8
- version/manageengine applications manager/16.8-build16800
- version/manageengine applications manager/16.8-build16810
- version/manageengine applications manager/16.8-build16820
- version/manageengine applications manager/16.8-build16830
- version/manageengine applications manager/16.8-build16840
- version/manageengine applications manager/16.8-build16841
- version/manageengine applications manager/16.8-build16842
- version/manageengine applications manager/16.8-build16843
- version/manageengine applications manager/17.0
- version/manageengine applications manager/17.0-build170000
- version/manageengine applications manager/17.0-build170001
- version/manageengine applications manager/17.0-build170100
- version/manageengine applications manager/17.0-build170200
- version/manageengine applications manager/17.0-build170300
- version/manageengine applications manager/17.0-build170400
- version/manageengine applications manager/17.0-build170500
- version/manageengine applications manager/17.0-build170600
- version/manageengine applications manager/17.0-build170700
- version/manageengine applications manager/17.0-build170800
- version/manageengine applications manager/17.0-build170900