cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-9459,https://securityvulnerability.io/vulnerability/CVE-2024-9459,Zohocorp ManageEngine Exchange Reporter Plus vulnerable to SQL Injection,"Zohocorp's ManageEngine Exchange Reporter Plus versions up to and including 5718 have a vulnerability in its reports module that allows authenticated attackers to execute SQL injection attacks. This flaw can potentially lead to unauthorized access to sensitive data stored in the database, manipulating query execution and compromising the application's integrity. It is crucial for users of affected versions to apply available security patches to mitigate the risks associated with this vulnerability.",Manageengine,Exchange Reporter Plus,8.8,HIGH,0.0007200000109151006,false,false,false,false,,false,false,2024-11-05T05:44:57.368Z,0
CVE-2024-21775,https://securityvulnerability.io/vulnerability/CVE-2024-21775,Zoho ManageEngine Exchange Reporter Plus Vulnerable to Authenticated SQL Injection,"Zoho ManageEngine Exchange Reporter Plus versions up to 5714 are susceptible to an authenticated SQL injection vulnerability concerning its report exporting feature. This weakness could allow an attacker with valid credentials to exploit the system and execute arbitrary SQL commands. As a result, sensitive data may be exposed or manipulated, leading to potential data breaches and unauthorized access. It is crucial for users to apply necessary patches and updates to safeguard their systems against this type of attack.",Manageengine,Exchange Reporter Plus,8.8,HIGH,0.00203000009059906,false,false,false,false,,false,false,2024-02-16T14:35:11.451Z,0