CVE-2024-9459

Summary

CVE-2024-9459 is a new vulnerability affecting Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and earlier. This issue permits authenticated attackers to inject SQL queries into reports, potentially gaining unauthorized access to sensitive data or even taking control of the affected system. Successful exploitation relies on the attacker's ability to manipulate report input fields, making it crucial for administrators to patch their systems promptly to mitigate risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.