VulnSocial

CVE-2024-5678Active Exploitation(zohocorp / manageengine_applications_manager)

LOWCVSS 4.7 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for zohocorp manageengine_applications_manager systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

zohocorp CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • manageengine_applications_manager

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-12); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
zohocorp
Products
manageengine_applications_manager

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-12: 1Mentions · 2026-04-07: 1Active Exploitation · 2026-03-12: 103-1204-07
Signal classification2 categories
Active Exploitation
150.0%
General
150.0%
Classification over time
DateTotalLabels
2026-03-121
Active Exploitation1
2026-04-071
General1
Full discourse2 posts
  • David@davidsheyi
    Active Exploitation

    1/ QakBot, a notorious banking Trojan, resurged in 2025 with advanced evasion techniques. New delivery vectors include phishing campaigns exploiting CVE-2024-5678. #InfoSec #ThreatIntel

    Post summary

    The tweet indicates that QakBot employs CVE-2024-5678 in phishing campaigns, demonstrating active exploitation without offering technical details or mitigation guidance.

    1000036
    556 followersView on X
  • Orizon@OrizonCyber
    General

    Yesterday's front page: 47 comments debating $200 aluminum vs bamboo stands. Today's CVE-2024-5678 affecting 80% of containers: 3 upvotes, buried on page 4. We optimize our desks while attackers optimize their shells. Guess who wins?

    Post summary

    The post merely notes the existence of CVE-2024-5678 affecting a large portion of containers, without providing any actionable details, PoC, exploit, patch, or evidence of active exploitation.

    0000029
    16 followersView on X
CPE platform detail22 entries

22 of 22 entries

PartVendorProductVersionTarget SWTarget HW
Appzohocorpmanageengine_applications_manager---
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager16.8--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--
Appzohocorpmanageengine_applications_manager17.0--

Explore more

Back to dashboardzohocorp CVEsmanageengine_applications_manager vulnerabilities