Lucene search
+L

152 matches found

Cvelist
Cvelist
added 2024/05/27 5:59 p.m.36 views

CVE-2024-36037 Insufficient Access Control Vulnerability

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings...

5.5CVSS5.3AI score0.00458EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/27 5:59 p.m.84 views

CVE-2024-36037

Zoho ManageEngine ADAudit Plus (Windows AD management tool) is affected by CVE-2024-36037 due to an insufficient access control flaw. Versions 7260 and below expose session recordings to unauthorized local agent machine users. The root cause is improper access control, enabling viewing of other u...

5.5CVSS6.5AI score0.00458EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/27 12:0 a.m.6 views

Zoho ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A security bypass vulnerability exists in ZOHO ManageEngine ADAudit Plus versions prior to 7270, which can be exploited by an attacker to modify agent configuration...

4.2CVSS6.7AI score0.00374EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/27 12:0 a.m.8 views

Zoho ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. An access control error vulnerability exists in ZOHO ManageEngine ADAudit Plus, which can be exploited by an attacker to view session logs...

5.5CVSS6.8AI score0.00458EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/22 6:15 p.m.8 views

CVE-2024-21791

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...

7.2CVSS5.8AI score0.02152EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/22 6:5 p.m.72 views

CVE-2024-21791

CVE-2024-21791 affects Zoho ManageEngine ADAudit Plus versions below 7271, where a SQL injection in the Lock History option is possible. Root cause: input handling in the lockout history path enables SQL injection. Impact stated in sources includes high confidentiality, integrity, and availabilit...

7.2CVSS5.4AI score0.02152EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/05/20 6:15 p.m.9 views

CVE-2023-49335

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...

8.8CVSS5.8AI score0.03005EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/20 6:15 p.m.5 views

CVE-2023-49334

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report...

8.8CVSS5.8AI score0.03005EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/20 6:15 p.m.7 views

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...

8.8CVSS5.8AI score0.03005EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/20 5:45 p.m.15 views

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...

8.3CVSS8AI score0.03005EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/20 12:0 a.m.6 views

Zoho ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by Zoho USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7271, which stems from a vulnerability that allows SQL injection when fetching aggregated...

8.8CVSS7.7AI score0.02288EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.3 views

PT-2024-13942 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus affected versions not specified Description: A comprehensive exploration of the intricate vulnerabilities of ManageEngine ADAudit Plus has been conducted. Recommendations: At the moment, there is no information about...

6.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/02/07 12:0 a.m.46 views

ManageEngine ADAudit Plus < Build 7271 Multiple Vulnerabilities

The ManageEngine ADAudit Plus running on the remote host is prior to build 7271. It is, therefore, affected by mutliple SQL injection vulnerabilities: - ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data. CVE-2024-0253 -...

9.8CVSS8.4AI score0.06951EPSS
SaveExploits0References12
OSV
OSV
added 2024/02/02 1:15 p.m.11 views

CVE-2024-0269

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...

8.8CVSS7.2AI score0.05366EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/02 1:15 p.m.28 views

CVE-2024-0269

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...

8.8CVSS9AI score0.05366EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/02 1:15 p.m.26 views

Sql injection

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data...

6.5CVSS8.2AI score0.05012EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/02/02 1:15 p.m.29 views

Sql injection

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...

6.5CVSS8.2AI score0.05366EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/02 1:5 p.m.20 views

CVE-2024-0269 SQL Injection

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...

8.3CVSS7.8AI score0.05366EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/02 12:50 p.m.35 views

CVE-2024-0253 SQL Injection

ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data...

8.3CVSS9.7AI score0.05012EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/02 2:15 a.m.29 views

Sql injection

Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature...

7.5CVSS8.5AI score0.06951EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder