Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.
References
Link | Resource |
---|---|
https://www.manageengine.com/itom/advisory/cve-2024-5466.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Aug 2024, 13:32
Type | Values Removed | Values Added |
---|---|---|
First Time |
Zoho
Zohocorp manageengine Opmanager Plus Zohocorp manageengine Opmanager Zohocorp Zohocorp manageengine Opmanager Msp Zoho manageengine Remote Monitoring And Management |
|
Summary |
|
|
References | () https://www.manageengine.com/itom/advisory/cve-2024-5466.html - Vendor Advisory | |
CPE | cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.8:build128187:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager:12.8:build128187:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.8:build128186:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_msp:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager:12.8:build128186:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.8:build128103:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.8:build128102:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.8:build128102:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.8:build128187:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_msp:12.8:build128104:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager:12.8:build128103:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.8:build128186:*:*:*:*:*:* cpe:2.3:a:zoho:manageengine_remote_monitoring_and_management:-:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_plus:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager:12.8:build128104:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.8:build128103:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager:12.8:build128102:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_opmanager_plus:12.8:build128104:*:*:*:*:*:* |
23 Aug 2024, 14:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-23 14:15
Updated : 2024-08-27 13:32
NVD link : CVE-2024-5466
Mitre link : CVE-2024-5466
CVE.ORG link : CVE-2024-5466
JSON object : View
Products Affected
zoho
- manageengine_remote_monitoring_and_management
zohocorp
- manageengine_opmanager
- manageengine_opmanager_plus
- manageengine_opmanager_msp
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')