Vulnerabilities (CVE)

Filtered by vendor Zohocorp Subscribe
Filtered by product Manageengine Adaudit Plus
Total 33 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-5467 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-27 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.
CVE-2024-36517 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-27 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.
CVE-2024-36516 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-27 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.
CVE-2024-36514 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-27 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.
CVE-2024-36515 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-27 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.
CVE-2024-5527 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-16 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.
CVE-2024-36035 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-16 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.
CVE-2024-5487 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-16 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.
CVE-2024-36034 1 Zohocorp 1 Manageengine Adaudit Plus 2024-08-16 N/A 8.8 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.
CVE-2024-0269 1 Zohocorp 1 Manageengine Adaudit Plus 2024-07-03 N/A 8.8 HIGH
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
CVE-2024-0253 1 Zohocorp 1 Manageengine Adaudit Plus 2024-07-03 N/A 8.8 HIGH
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.
CVE-2023-48793 1 Zohocorp 1 Manageengine Adaudit Plus 2024-07-03 N/A 9.8 CRITICAL
Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.
CVE-2023-48792 1 Zohocorp 1 Manageengine Adaudit Plus 2024-07-03 N/A 9.8 CRITICAL
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option.