CVE-2024-38870 | Zoho ManageEngine OpManager 128237/128249/up to 128103 Reports cross site scripting

A vulnerability was found in Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP and OpManager Enterprise Edition up to 128103/128237/128249. It has been declared as problematic. This vulnerability affects unknown code of the component Reports. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2024-38870. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.