CVE-2022-28219: Improper Restriction of XML External Entity Reference

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution...

PT-2022-3394 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7060 Description: The issue is related to the cewolf component in Zoho ManageEngine ADAudit Plus, which is vulnerable to an unauthenticated XXE attack due to incorrect restriction of XML extern...

CVE-2022-24978: Cleartext Transmission of Sensitive Information

Zoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on Integrated products. This occurs because a password field is present in a JSON response...

ManageEngine ADAudit Plus < Build 7006 File Upload RCE

Binary data manageengineadauditpluscve-2021-42847.nbin...

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

PT-2021-23695 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7006 Description: The issue allows attackers to write to and execute arbitrary files, potentially leading to unauthorized access and malicious activities. Recommendations: For versions prior to...

CVE-2021-42847: Undefined Security Weakness

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

CVE-2018-19118

Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service stack-based buffer overflow via the 'Domain Name' field when adding a new domain...

CVE-2018-19118: Out-of-bounds Write

Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service stack-based buffer overflow via the 'Domain Name' field when adding a new domain...

PT-2018-14812

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADAudit versions prior to 5.1 build 5120 Description The issue allows remote attackers to cause a denial of service due to a stack-based buffer overflow. This occurs via the Domain Name field when adding a new domain...

Zoho ManageEngine ADAudit Plus SQL Injection Vulnerability

ZOHO ManageEngine ADAudit Plus is a window Active Directory real-time auditing system from ZOHO USA. The system is capable of monitoring or auditing critical resources such as domain controllers in a network in real time. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus prio...

CVE-2018-10466

Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection...

Sql injection

Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection...

CVE-2018-10466

Zoho ManageEngine ADAudit Plus is affected by CVE-2018-10466: a SQL injection vulnerability in ADAudit Plus before version 5.0.0 build 5100. Root cause is unsafe handling of input that enables blind SQL injection, allowing a remote attacker to execute arbitrary SQL commands (impacting confidentia...

CVE-2018-10466: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection...

ManageEngine ADAudit Plus Detection

ADAudit Plus, a web-based Active Directory change auditing software, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46788; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADAudit Plus Detection";...

Cross site scripting

Cross-site scripting XSS vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2010-2049: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained...