CVE-2024-27311

—

CVSS 3.1

8.8 high

EPSS

1%p72

Published

Jul 17, 2024 (Jul 17, 2024)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

Vendors: zohocorp
Products: manageengine ddi central
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.