CVE-2024-24409

Privilege Escalation

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.

Affected

ManageEngine · ADManager Plus

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

6.20% chance of exploitation in the next 30 days, 93rd percentile

Published

2024-11-08

Proof-of-concept exploits (1)

• passtheticket/CVE-2024-244091★ · 2024-11-29

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52148

Security advisories

• https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2024-24409.html

References

• CVE Record
• NVD entry

Related

• CVE-2020-35850
• CVE-2022-28987
• CVE-2023-31492
• CVE-2023-48003
• CVE-2024-38200
• CVE-2025-9435