CVE-2024-38870

Stored XSS

State: Published
Severity: 3.5 Low
Published: Jul 17, 2024
Updated: Aug 2, 2024
Reserved: Jun 20, 2024

Description

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module.

Scores

CVSS	Score	Vector	Source
3.1	3.5 Low	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N	ManageEngine

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Affected Products

Product	Versions
OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise EditionManageEngine	before 128104Affected 128151 to before 128238Affected 128247 to before 128250Affected

References

https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.