CVE-2024-5466

Remote Code Execution

State: Published
Severity: 8.8 High
Published: Aug 23, 2024
Updated: Aug 23, 2024
Reserved: May 29, 2024

Description

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	ManageEngine

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
OpManager, Remote Monitoring and ManagementManageEngine	128329 and earlierAffected

References

https://www.manageengine.com/itom/advisory/cve-2024-5466.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.