CVE-2024-38870: ManageEngine Opmanager, Opmanager Plus, Opmanager Msp, Opmanager Enterprise Edition

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition versions before 128104, from 128151 before 128238, from 128247 before 128250 are vulnerable to Stored XSS vulnerability in reports module.

Affected products

• ManageEngine Opmanager, Opmanager Plus, Opmanager Msp, Opmanager Enterprise Edition: before 128104 (fixed in 128104); from 128151, before 128238 (fixed in 128238); from 128247, before 128250 (fixed in 128250)

Published 2024-07-17. Last modified 2026-06-17.