CVE-2024-38871

8.8 highEPSS 3.1%

High (8.8) in zohocorp manageengine exchange reporter plus. EPSS 3.1% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module.

Severity

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19