CVE-2024-9100 - Local File Inclusion

MEDIUM

Local File Inclusion

Published Oct 3, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.48%

Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<5410

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://www.manageengine.com/analytics-plus/CVE-2024-9100.html
https://www.zoho.com/analytics/onpremise/CVE-2024-9100.html

No recorded changes yet.

Sources

Status PUBLISHED

Assigner ManageEngine

Published Oct 3, 2024

Updated Oct 3, 2024

Reserved Sep 23, 2024

Updated Oct 3, 2024

Status Deferred

Modified Jun 17, 2026

Severity n/a

Public date n/a