CVE-2024-10839

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Nov 8, 2024
Updated: Nov 13, 2024
CWE ID 611

Summary

CVE-2024-10839 is a newly disclosed vulnerability affecting ManageEngine SharePoint Manager Plus versions 4503 and earlier. This issue allows authenticated attackers to inject and process malicious XML data, leading to an XML External Entity (XXE) vulnerability. Successful exploitation could result in unauthorized data access or disclosure, as well as potential denial-of-service attacks. It's crucial for organizations using these versions to apply the necessary patches as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share