CVE-2024-36038: ManageEngine Opmanager

Medium severity, CVSS 6.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option.

Affected products

• ManageEngine Opmanager: from 128234, before 128248 (fixed in 128248)

Published 2024-06-24. Last modified 2026-06-17.