nvd-json-data-feeds/CVE-2024/CVE-2024-388xx/CVE-2024-38870.json

{
  "id": "CVE-2024-38870",
  "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
  "published": "2024-07-17T17:15:15.407",
  "lastModified": "2024-11-21T09:26:54.037",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module."
    },
    {
      "lang": "es",
      "value": "Las versiones Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP y OpManager Enterprise Edition anteriores a 128104, 128151 anteriores a 128238 y 128247 anteriores a 128250 son efectados por la vulnerabilidad XSS almacenado en el m\u00f3dulo de informes."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
          "baseScore": 3.5,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 2.5
      }
    ]
  },
  "weaknesses": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02"
    },
    {
      "url": "https://www.manageengine.com/network-monitoring/security-updates/cve-2024-38870.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}