CVE-2024-38870
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Stored XSS
Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise Edition
- Vendor
- ManageEngine
- Product
- OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise Edition
- Platforms
- Unknown
- Default status
unaffected- Package collection
- https://www.manageengine.com/network-monitoring/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | 128104 | 128104 | Unavailable | None listed |
| 128151 | affected | 128238 | 128238 | Unavailable | None listed |
| 128247 | affected | 128250 | 128250 | Unavailable | None listed |