Security Advisory

ManageEngine (Exchange Reporter Plus) Product August 2024 Security Update Advisory

  • Sep 02 2024

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. Users of affected products are advised to update to the latest version.

 

Affected Products

 

Exchange Reporter Plus build 5714 and below

 

Resolved Vulnerabilities

 

High impact SQL injection vulnerability in Exchange Reporter Plus (CVE-2024-6204) [1]

 

Vulnerability Patches

 

Please follow the security advisory published on August 30, 2018 to update to the appropriate version and the latest version.

Exchange Reporter Plus version 5715

 

Referenced Sites

 

[1] CVE-2024-6204 – Authenticated SQL Injection Vulnerability

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2024-6204.html

Tags:

Previous Post

Next Post