Read the docs
TI-2024-16110 Aliases CVE-2024-24409GHSA-jfpv-w642-pc5g

Privilege escalation in ManageEngine ADManager Plus

Priority MEDIUM 49CWE-269Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.06196 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ManageEngineADManager Plusup to 7203—No fix listedCNA
  • ADManager Plus VendorManageEngine Affected up to 7203 Fixed in — No fix listed CNA

CPE configurations NVD · 84

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:-:*:*:*:*:*:*6.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6100:*:*:*:*:*:*6.1 6100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6101:*:*:*:*:*:*6.1 6101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6102:*:*:*:*:*:*6.1 6102VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6103:*:*:*:*:*:*6.1 6103VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6104:*:*:*:*:*:*6.1 6104VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6105:*:*:*:*:*:*6.1 6105VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6106:*:*:*:*:*:*6.1 6106VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6107:*:*:*:*:*:*6.1 6107VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6108:*:*:*:*:*:*6.1 6108VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:-:*:*:*:*:*:* Versions 6.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6100:*:*:*:*:*:* Versions 6.1 6100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6101:*:*:*:*:*:* Versions 6.1 6101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6102:*:*:*:*:*:* Versions 6.1 6102 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6103:*:*:*:*:*:* Versions 6.1 6103 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6104:*:*:*:*:*:* Versions 6.1 6104 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6105:*:*:*:*:*:* Versions 6.1 6105 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6106:*:*:*:*:*:* Versions 6.1 6106 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6107:*:*:*:*:*:* Versions 6.1 6107 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6108:*:*:*:*:*:* Versions 6.1 6108 Vulnerable ·Zohocorp
Show 74 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6109:*:*:*:*:*:*6.1 6109VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6110:*:*:*:*:*:*6.1 6110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6111:*:*:*:*:*:*6.1 6111VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.2:*:*:*:*:*:*:*6.2VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7:*:*:*:*:*:*:*6.5.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6657:*:*:*:*:*:*6.6 6657VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6660:*:*:*:*:*:*6.6 6660VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5:*:*:*:*:*:*:*6.6.5VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:-:*:*:*:*:*:*7.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7000:*:*:*:*:*:*7.0 7000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7010:*:*:*:*:*:*7.0 7010VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7011:*:*:*:*:*:*7.0 7011VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7020:*:*:*:*:*:*7.0 7020VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7030:*:*:*:*:*:*7.0 7030VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7040:*:*:*:*:*:*7.0 7040VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7041:*:*:*:*:*:*7.0 7041VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7050:*:*:*:*:*:*7.0 7050VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7051:*:*:*:*:*:*7.0 7051VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7052:*:*:*:*:*:*7.0 7052VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7053:*:*:*:*:*:*7.0 7053VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7054:*:*:*:*:*:*7.0 7054VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7055:*:*:*:*:*:*7.0 7055VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7056:*:*:*:*:*:*7.0 7056VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7060:*:*:*:*:*:*7.0 7060VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7061:*:*:*:*:*:*7.0 7061VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7062:*:*:*:*:*:*7.0 7062VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7063:*:*:*:*:*:*7.0 7063VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7064:*:*:*:*:*:*7.0 7064VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7065:*:*:*:*:*:*7.0 7065VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7066:*:*:*:*:*:*7.0 7066VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:*7.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*7.1 7100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*7.1 7101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*7.1 7102VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*7.1 7110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*7.1 7111VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*7.1 7112VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*7.1 7113VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*7.1 7114VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*7.1 7115VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*7.1 7116VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*7.1 7117VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*7.1 7118VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*7.1 7120VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*7.1 7121VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*7.1 7122VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*7.1 7123VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*7.1 7124VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*7.1 7125VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*7.1 7126VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*7.1 7130VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*7.1 7131VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*7.1 7140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*7.1 7141VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*7.1 7150VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*7.1 7151VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*7.1 7160VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*7.1 7161VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:*7.1 7162VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:*7.1 7163VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:*7.1 7170VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:*7.1 7171VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:*7.1 7180VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7181:*:*:*:*:*:*7.1 7181VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7182:*:*:*:*:*:*7.1 7182VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7183:*:*:*:*:*:*7.1 7183VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7184:*:*:*:*:*:*7.1 7184VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7185:*:*:*:*:*:*7.1 7185VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7186:*:*:*:*:*:*7.1 7186VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7188:*:*:*:*:*:*7.1 7188VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*7.2 7200VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*7.2 7201VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*7.2 7202VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:*7.2 7203VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6109:*:*:*:*:*:* Versions 6.1 6109 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6110:*:*:*:*:*:* Versions 6.1 6110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1:6111:*:*:*:*:*:* Versions 6.1 6111 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7:*:*:*:*:*:*:* Versions 6.5.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6657:*:*:*:*:*:* Versions 6.6 6657 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6:6660:*:*:*:*:*:* Versions 6.6 6660 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5:*:*:*:*:*:*:* Versions 6.6.5 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7000:*:*:*:*:*:* Versions 7.0 7000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7010:*:*:*:*:*:* Versions 7.0 7010 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7011:*:*:*:*:*:* Versions 7.0 7011 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7020:*:*:*:*:*:* Versions 7.0 7020 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7030:*:*:*:*:*:* Versions 7.0 7030 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7040:*:*:*:*:*:* Versions 7.0 7040 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7041:*:*:*:*:*:* Versions 7.0 7041 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7050:*:*:*:*:*:* Versions 7.0 7050 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7051:*:*:*:*:*:* Versions 7.0 7051 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7052:*:*:*:*:*:* Versions 7.0 7052 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7053:*:*:*:*:*:* Versions 7.0 7053 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7054:*:*:*:*:*:* Versions 7.0 7054 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7055:*:*:*:*:*:* Versions 7.0 7055 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7056:*:*:*:*:*:* Versions 7.0 7056 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7060:*:*:*:*:*:* Versions 7.0 7060 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7061:*:*:*:*:*:* Versions 7.0 7061 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7062:*:*:*:*:*:* Versions 7.0 7062 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7063:*:*:*:*:*:* Versions 7.0 7063 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7064:*:*:*:*:*:* Versions 7.0 7064 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7065:*:*:*:*:*:* Versions 7.0 7065 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0:7066:*:*:*:*:*:* Versions 7.0 7066 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:-:*:*:*:*:*:* Versions 7.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:* Versions 7.1 7100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:* Versions 7.1 7101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:* Versions 7.1 7102 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:* Versions 7.1 7110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:* Versions 7.1 7111 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:* Versions 7.1 7112 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:* Versions 7.1 7113 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:* Versions 7.1 7114 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:* Versions 7.1 7115 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:* Versions 7.1 7116 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:* Versions 7.1 7117 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:* Versions 7.1 7118 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:* Versions 7.1 7120 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:* Versions 7.1 7121 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:* Versions 7.1 7122 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:* Versions 7.1 7123 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:* Versions 7.1 7124 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:* Versions 7.1 7125 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:* Versions 7.1 7126 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:* Versions 7.1 7130 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:* Versions 7.1 7131 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:* Versions 7.1 7140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:* Versions 7.1 7141 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:* Versions 7.1 7150 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:* Versions 7.1 7151 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:* Versions 7.1 7160 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:* Versions 7.1 7161 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7162:*:*:*:*:*:* Versions 7.1 7162 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7163:*:*:*:*:*:* Versions 7.1 7163 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7170:*:*:*:*:*:* Versions 7.1 7170 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7171:*:*:*:*:*:* Versions 7.1 7171 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7180:*:*:*:*:*:* Versions 7.1 7180 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7181:*:*:*:*:*:* Versions 7.1 7181 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7182:*:*:*:*:*:* Versions 7.1 7182 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7183:*:*:*:*:*:* Versions 7.1 7183 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7184:*:*:*:*:*:* Versions 7.1 7184 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7185:*:*:*:*:*:* Versions 7.1 7185 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7186:*:*:*:*:*:* Versions 7.1 7186 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7188:*:*:*:*:*:* Versions 7.1 7188 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:* Versions 7.2 7200 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:* Versions 7.2 7201 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:* Versions 7.2 7202 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:* Versions 7.2 7203 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-24409
  2. 2026-10-03 Alias added: GHSA-jfpv-w642-pc5g

References

Advisory 1

  • TI-2015-06796 The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows… CVSS 3.0CRITICAL 9.8
  • TI-2014-04325 Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer… CVSS 3.0HIGH 8.8
  • TI-2017-08514 Path traversal in Zoho ManageEngine ServiceDesk CVSS 3.0HIGH 7.5
  • TI-2023-25530 Path traversal in ManageEngine OpManager CVSS 3.1CRITICAL 9.1
  • TI-2025-03383 SQL injection in ManageEngine ADSelfService Plus CVSS 3.1HIGH 8.1
  • TI-2025-24864 SQL injection in ManageEngine ADAudit Plus CVSS 3.1HIGH 8.3
See all 131 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences