Lucene search
HistoryFeb 02, 2024 - 2:15 a.m.
CVE-2023-48793
zoho
adaudit plus
sql injection
cve-2023-48793
aggregate report
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.077 Low
EPSS
Percentile
94.2%
Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.
Affected configurations
Node
zohocorpmanageengine_adaudit_plusRange<7.2
ORzohocorpmanageengine_adaudit_plusMatch7.27200
ORzohocorpmanageengine_adaudit_plusMatch7.27201
ORzohocorpmanageengine_adaudit_plusMatch7.27202
ORzohocorpmanageengine_adaudit_plusMatch7.27203
ORzohocorpmanageengine_adaudit_plusMatch7.27210
ORzohocorpmanageengine_adaudit_plusMatch7.27211
ORzohocorpmanageengine_adaudit_plusMatch7.27212
ORzohocorpmanageengine_adaudit_plusMatch7.27213
ORzohocorpmanageengine_adaudit_plusMatch7.27215
ORzohocorpmanageengine_adaudit_plusMatch7.27220
ORzohocorpmanageengine_adaudit_plusMatch7.27250
ORzohocorpmanageengine_adaudit_plusMatch7.27251
ORzohocorpmanageengine_adaudit_plusMatch7.27260
ORzohocorpmanageengine_adaudit_plusMatch7.27270
Related
prion
prion
Sql injection
2024-02-02 02:15:00
cve
cve
CVE-2023-48793
2024-02-02 02:15:16
vulnrichment
vulnrichment
CVE-2023-48793
2024-02-02 00:00:00
cvelist
cvelist
CVE-2023-48793
2024-02-02 00:00:00
nessus
nessus
ManageEngine ADAudit Plus < Build 7271 Multiple Vulnerabilities
2024-02-07 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.077 Low
EPSS
Percentile
94.2%
Related for NVD:CVE-2023-48793