Lucene search

K
nvd0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2024-0269
HistoryFeb 02, 2024 - 1:15 p.m.

CVE-2024-0269

2024-02-0213:15:09
CWE-89
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
manageengine adaudit plus
sql injection
vulnerability
fixed
cve-2024-0269

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.3%

ManageEngine ADAudit Plus versionsย 7270ย and below are vulnerable to the Authenticated SQL injection inย File-Summary DrillDown. This issue has been fixed and released in version 7271.

Affected configurations

NVD
Node
zohocorpmanageengine_adaudit_plusRange<7.2
OR
zohocorpmanageengine_adaudit_plusMatch7.27200
OR
zohocorpmanageengine_adaudit_plusMatch7.27201
OR
zohocorpmanageengine_adaudit_plusMatch7.27202
OR
zohocorpmanageengine_adaudit_plusMatch7.27203
OR
zohocorpmanageengine_adaudit_plusMatch7.27210
OR
zohocorpmanageengine_adaudit_plusMatch7.27211
OR
zohocorpmanageengine_adaudit_plusMatch7.27212
OR
zohocorpmanageengine_adaudit_plusMatch7.27213
OR
zohocorpmanageengine_adaudit_plusMatch7.27215
OR
zohocorpmanageengine_adaudit_plusMatch7.27220
OR
zohocorpmanageengine_adaudit_plusMatch7.27250
OR
zohocorpmanageengine_adaudit_plusMatch7.27251
OR
zohocorpmanageengine_adaudit_plusMatch7.27260
OR
zohocorpmanageengine_adaudit_plusMatch7.27270

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.3%

Related for NVD:CVE-2024-0269