CVE-2024-10839

—

CVSS 3.1

8.1 high

EPSS

2%p83

Published

Nov 8, 2024 (Nov 8, 2024)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

Vendors: zohocorp
Products: manageengine sharepoint manager plus
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.