Authenticated SQL Injection in ManageEngine OpManager Products
CVE-2024-6748
Currently unrated
What is CVE-2024-6748?
ManageEngine OpManager and its variants are susceptible to an authenticated SQL injection vulnerability present in URL monitoring functionalities. This flaw allows attackers with valid access to exploit injection points, leading to unauthorized access to sensitive data. Organizations utilizing OpManager, OpManager Plus, OpManager MSP, and RMM versions 128317 and below should prioritize implementing security measures to mitigate potential threats associated with this issue.