CVE-2024-9100
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published: Oct 3, 2024 / Updated: 47d ago
010
CVSS 6.5EPSS 0.04%Medium
CVE info copied to clipboard
Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
CVE Assignment
NVD published the first details for CVE-2024-9100
Oct 3, 2024 at 3:15 PM
First Article
Feedly found the first article mentioning CVE-2024-9100. See article
Oct 3, 2024 at 3:19 PM / VulDB Recent Entries
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 3, 2024 at 3:19 PM
CVSS
A CVSS base score of 6.5 has been assigned.
Oct 3, 2024 at 3:20 PM / nvd
EPSS
EPSS Score was set to: 0.04% (Percentile: 11.2%)
Oct 4, 2024 at 9:41 AM
Affected Systems
Zohocorp/manageengine_analytics_plus
+null more
Attack Patterns
CAPEC-126: Path Traversal
+null more
News
CVE Alert: CVE-2024-9100 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-9100/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_9100
NA - CVE-2024-9100 - Zohocorp ManageEngine Analytics Plus versions...
Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal.
CVE-2024-9100
Medium Severity Description Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal. Read more at https://www.tenable.com/cve/CVE-2024-9100
CVE-2024-9100 Local File Inclusion
Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path...
CVE-2024-9100
Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path...
See 5 more articles and social media posts