Lucene search
0fc0942c-577d-436f-ae8e-945763c79b02CVE-2024-0269HistoryFeb 02, 2024 - 1:15 p.m.
CVE-2024-0269
2024-02-0213:15:09
CWE-89
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
11
manageengine
adaudit plus
sql injection
vulnerability
cve-2024-0269
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
75.2%
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
Affected configurations
Node
zohocorpmanageengine_adaudit_plusRange<7.2
ORzohocorpmanageengine_adaudit_plusMatch7.27200
ORzohocorpmanageengine_adaudit_plusMatch7.27201
ORzohocorpmanageengine_adaudit_plusMatch7.27202
ORzohocorpmanageengine_adaudit_plusMatch7.27203
ORzohocorpmanageengine_adaudit_plusMatch7.27210
ORzohocorpmanageengine_adaudit_plusMatch7.27211
ORzohocorpmanageengine_adaudit_plusMatch7.27212
ORzohocorpmanageengine_adaudit_plusMatch7.27213
ORzohocorpmanageengine_adaudit_plusMatch7.27215
ORzohocorpmanageengine_adaudit_plusMatch7.27220
ORzohocorpmanageengine_adaudit_plusMatch7.27250
ORzohocorpmanageengine_adaudit_plusMatch7.27251
ORzohocorpmanageengine_adaudit_plusMatch7.27260
ORzohocorpmanageengine_adaudit_plusMatch7.27270
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_adaudit_plus | zohocorp manageengine adaudit plus | lt | 7.2 |
CNA Affected
[
{
"collectionURL": "https://www.manageengine.com/products/download.html",
"defaultStatus": "affected",
"platforms": [
"Windows"
],
"product": "ADAudit Plus",
"vendor": "ManageEngine",
"versions": [
{
"lessThan": "7270",
"status": "affected",
"version": "0",
"versionType": "6401"
}
]
}
]Related
prion
prion
Sql injection
2024-02-02 13:15:00
nvd
nvd
CVE-2024-0269
2024-02-02 13:15:09
cvelist
cvelist
CVE-2024-0269 SQL Injection
2024-02-02 13:05:35
vulnrichment
vulnrichment
CVE-2024-0269 SQL Injection
2024-02-02 13:05:35
nessus
nessus
ManageEngine ADAudit Plus < Build 7271 Multiple Vulnerabilities
2024-02-07 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
75.2%
Related for CVE-2024-0269