CVE-2024-38870

3.5 lowEPSS 0.3%

Low (3.5). EPSS 0.3% chance of exploitation in the next 30 days.

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module.

Severity

CVSS 3.1

3.5 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2024-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html
https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html

Check your stack JSON