---
id: 7306
title: "Phân tích CVE-2024-6748"
cve: CVE-2024-6748
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/phan-tich-cve-2024-6748/"
published_at: "2024-11-12T11:52:33Z"
tags: ["manageengine", "sql-injection", "vulnerability", "opmanager", "cve-2024-6748", "patch-diff"]
phying_url: "https://phying.com/item/7306"
lang: en
---

# Phân tích CVE-2024-6748

## Summary

Viettel analyzes CVE-2024-6748, a CVSS 8.3 SQL injection in the URL monitoring feature of ManageEngine OpManager, exploitable by authenticated users and patched in build 128318.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2024-6748
- **Published:** 2024-11-12T11:52:33Z
- **Original:** https://blog.viettelcybersecurity.com/phan-tich-cve-2024-6748/
- **Phying News:** https://phying.com/item/7306