Lucene search
+L

152 matches found

OSV
OSV
added 2024/08/23 2:15 p.m.9 views

CVE-2024-36517

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

8.8CVSS5.8AI score0.05279EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/23 2:15 p.m.36 views

CVE-2024-36517

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

8.8CVSS0.05279EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/23 2:15 p.m.7 views

CVE-2024-36514

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option...

8.8CVSS5.8AI score0.04037EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/23 1:37 p.m.59 views

CVE-2024-36515

CVE-2024-36515 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The issue is an authenticated SQL injection in the dashboard component, due to improper handling of inputs in dashboard queries. The impact is described as high in the CVE entries. No remediation steps are provided in ...

8.8CVSS7.7AI score0.04505EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/23 1:36 p.m.14 views

CVE-2024-36516 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36515, both of which have affected ADAudit Plus' dashboard...

8.3CVSS8.5AI score0.04413EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/23 1:34 p.m.55 views

CVE-2024-36517

CVE-2024-36517 affects Zohocorp ManageEngine ADAudit Plus versions below 8000, due to an authenticated SQL injection in the alerts module. Public details consistently describe exploitability via the authenticated user in the affected component, enabling attackers to execute arbitrary queries and ...

8.8CVSS7.8AI score0.05279EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/23 1:28 p.m.34 views

CVE-2024-5467 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...

8.3CVSS0.04517EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/23 12:0 a.m.6 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A SQL injection vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 8121, which can be exploited by an attacker to execute custom queries and access database tab...

8.8CVSS8.1AI score0.05172EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/15 12:0 a.m.23 views

ManageEngine ADAudit Plus < Build 8003 Multiple Vulnerabilities

The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8003. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...

8.8CVSS6AI score0.07373EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/08/15 12:0 a.m.36 views

ManageEngine ADAudit Plus < Build 8110 Multiple Vulnerabilities

The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8110. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

8.8CVSS5.9AI score0.04702EPSS
SaveExploits0References6
OSV
OSV
added 2024/08/12 1:38 p.m.5 views

CVE-2024-5527

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

8.8CVSS5.8AI score0.04702EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.6 views

CVE-2024-5487

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option...

8.8CVSS5.8AI score0.04702EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.5 views

CVE-2024-36035

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

8.8CVSS5.8AI score0.07373EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/12 1:38 p.m.4 views

CVE-2024-36034

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...

8.8CVSS5.8AI score0.07373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/12 7:19 a.m.19 views

CVE-2024-36035 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording...

8.3CVSS0.07373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/12 5:31 a.m.28 views

CVE-2024-5527 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration...

8.3CVSS0.04702EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.5 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, prove compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 8110, which stems from the vulnerability to authenticated SQL injection attacks in the Attack...

8.3CVSS7.6AI score0.03117EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.11 views

The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus, related to information disclosure, allows a malicious individual to gain unauthorized access to protected information or modify the configuration of the software.

The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus relates to information disclosure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or alter the configuration of the softwa...

4.2CVSS5.9AI score0.00374EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.9 views

The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus, related to access control deficiencies, allows a perpetrator to view data recorded by other users’ sessions.

The vulnerability of the Windows Active Directory AD management and reporting software Zoho ManageEngine ADAudit Plus is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to view data recorded by other users’ sessions...

5.5CVSS5.5AI score0.00458EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2024/05/28 12:0 a.m.41 views

ZOHO ManageEngine ADAudit Plus Security Bypass Vulnerability

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A security bypass vulnerability exists in ZOHO ManageEngine ADAudit Plus versions prior to 7270, which can be exploited by an attacker to modify agent configuration...

4.2CVSS6.8AI score0.00374EPSS
SaveExploits0References1
Rows per page
Query Builder