CVE-2024-9459: SQL Injection
Published Nov 5, 2024
·Updated
Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.
Affected Software
20 affected components
ZohoCorp ManageEngine Exchange Reporter Plus<5.7
ZohoCorp ManageEngine Exchange Reporter Plus=5.7
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5700
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5701
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5702
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5703
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5704
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5705
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5706
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5707
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5708
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5709
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5710
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5711
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5712
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5713
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5714
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5715
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5717
ZohoCorp ManageEngine Exchange Reporter Plus=5.7-5718
Event History
Nov 5, 2024
CVE Published
via MITRE·05:44 AM
Data Sourced
via MITRE·05:44 AM
DescriptionSeverityWeakness
Apr 21, 57000
Event
via FIRST·06:26 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-9459?
CVE-2024-9459 is classified as a high severity vulnerability due to the potential for authenticated SQL injection.
2
How do I fix CVE-2024-9459?
To fix CVE-2024-9459, upgrade to a version of ManageEngine Exchange Reporter Plus later than 5.7.
3
What are the affected versions of CVE-2024-9459?
The affected versions of CVE-2024-9459 include ManageEngine Exchange Reporter Plus 5.7 and earlier.
4
What type of vulnerability is CVE-2024-9459?
CVE-2024-9459 is an authenticated SQL injection vulnerability in the reports module.
5
Who is affected by CVE-2024-9459?
Any organization using ManageEngine Exchange Reporter Plus versions 5.7 or earlier may be affected by CVE-2024-9459.