CVE-2024-5678

Description

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

References

https://github.com/jonhenke/vuln-fixer-tool

https://github.com/Corvalon/lichen

https://github.com/rpancham/vllm-cve-tracker

https://github.com/dungnotnull/hd-buildah-enhanced

https://github.com/mamuaminu/cve-brief-pro

https://github.com/DorlixitoG/Prueba-NVD

https://github.com/Carsonregular365/Exploit-Hub

https://github.com/bakaboooom/CVE-Analyst-with-LangGraph

https://github.com/dariuslwh95/red-hat-cve-api-checker

https://github.com/elqahtani/wphunter

https://github.com/Addzyyy/cvesieve

https://github.com/calebnewtonusc/sealpatch

https://github.com/aryanpurie/CVE-Risk-Prioritization-engine

https://github.com/hawonb711-tech/CVE-Intelligence-Assistant

https://github.com/samhsu-dev/cve-extractor

https://github.com/robertwessen/cve-decorator

https://github.com/RomainRiv/cvecli

https://github.com/quanghoa1/Kernel-CVE-Tools

https://github.com/ZakariaHn/cve-tracker

https://github.com/RomainRiv/cvec

https://github.com/grimmolf/redhat-cve-tools

https://github.com/EvgeniyPatlan/cve_diff_scanner

https://github.com/aaronwfv/extractCveInsightsFromStreamId

https://github.com/mohamedalhassan789/secvuln-agent

https://github.com/BuildAndDestroy/ai-cve-mcp-server

https://github.com/BuildAndDestroy/ai-cve-vector-data

https://github.com/pranavipranz/cve-analyst-langgraph

https://github.com/Cyber-Agents-Fleet/CVE-MCP-Server

https://github.com/mauvehed/kevvy

https://github.com/mauvehed/cve-search-discord

https://github.com/kayoMichael/CVE

https://github.com/TFourie30/CheckCVE

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2024-5678.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS