CVE-2024-5466: Remote Code Execution

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-23 · updated 2026-06-17
Weakness: CWE-94

Description

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.

Affected products

Zohocorp ManageEngine OpManager: through 12.7; 12.8-build128102, 12.8-build128103, 12.8-build128104, 12.8-build128186, 12.8-build128187
Zohocorp Manageengine Opmanager Msp: through 12.7; 12.8-build128102, 12.8-build128103, 12.8-build128104, 12.8-build128186, 12.8-build128187
Zohocorp Manageengine Opmanager Plus: through 12.7; 12.8-build128102, 12.8-build128103, 12.8-build128104, 12.8-build128186, 12.8-build128187
Zohocorp Manageengine Remote Monitoring And Management Central: all versions

References

https://www.manageengine.com/itom/advisory/cve-2024-5466.html

Get alerted when CVE-2024-5466 or the next vulnerability affects your stack