CVE-2024-21775

8.8 highEPSS 5.0%

High (8.8) in zohocorp manageengine exchange reporter plus. EPSS 5.0% chance of exploitation in the next 30 days.

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature.

Severity

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-02-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19