CVE-2024-24409
Privilege Escalation
HIGH
8.8
CVSS Score
Published: November 8, 2024 at 08:01 AM UTC
Updated: June 17, 2026 at 07:14 AM UTC
2 products affected across 2 vendorsManageEngine ADManager PlusADManager Plus
Using ADManager Plus by ManageEngine?
Get instant alerts when new vulnerabilities affect ADManager Plus - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 6%
SSVC
No known exploit
Description
Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 72036.16.1 61006.1 61016.1 61026.1 61036.1 61046.1 61056.1 61066.1 61076.1 61086.1 61096.1 61106.1 61116.26.5.76.6 66576.6 66606.6.57.07.0 70007.0 70107.0 70117.0 70207.0 70307.0 70407.0 70417.0 70507.0 70517.0 70527.0 70537.0 70547.0 70557.0 70567.0 70607.0 70617.0 70627.0 70637.0 70647.0 70657.0 70667.17.1 71007.1 71017.1 71027.1 71107.1 71117.1 71127.1 71137.1 71147.1 71157.1 71167.1 71177.1 71187.1 71207.1 71217.1 71227.1 71237.1 71247.1 71257.1 71267.1 71307.1 71317.1 71407.1 71417.1 71507.1 71517.1 71607.1 71617.1 71627.1 71637.1 71707.1 71717.1 71807.1 71817.1 71827.1 71837.1 71847.1 71857.1 71867.1 71887.2 72007.2 72017.2 72027.2 7203
v ≤ 7203
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
Vendor Advisory
Source: 0fc0942c-577d-436f-ae8e-945763c79b02
https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-24409.htmlSSVC — Action Prioritization
SSVCNo known exploitNot automatableTotal impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
8.8HIGHManageEngine
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-269NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card