CVE-2024-5556 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module...

CVE-2024-5490

CVE-2024-5490 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. An authenticated SQL injection vulnerability exists in the aggregate reports option due to improper query handling, with high impact (C/I/A) per listed CVSS metrics. Affected part: aggregate reports functionality. Explo...

CVE-2024-5490 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...

CVE-2024-5490 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option...

CVE-2024-36514 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option...

CVE-2024-36514 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option...

CVE-2024-36514

CVE-2024-36514 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The issue is an authenticated SQL injection in the file summary option, enabling an attacker with low privileges and no user interaction to exploit it over the network. The vulnerability is confirmed across multiple fe...

CVE-2024-36515 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36516, both of which have affected ADAudit Plus' dashboard...

CVE-2024-36515

CVE-2024-36515 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The issue is an authenticated SQL injection in the dashboard component, due to improper handling of inputs in dashboard queries. The impact is described as high in the CVE entries. No remediation steps are provided in ...

CVE-2024-36515 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36516, both of which have affected ADAudit Plus' dashboard...

CVE-2024-36516 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36515, both of which have affected ADAudit Plus' dashboard...

CVE-2024-36516

CVE-2024-36516 affects Zohocorp ManageEngine ADAudit Plus versions below 8000, where an authenticated SQL injection vulnerability exists in the dashboard. The issue targets the dashboard component and is distinct from CVE-2024-36515 (also affecting the ADAudit Plus dashboard). Public descriptions...

CVE-2024-36516 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability CVE-2024-36515, both of which have affected ADAudit Plus' dashboard...

CVE-2024-36517 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

CVE-2024-36517

CVE-2024-36517 affects Zohocorp ManageEngine ADAudit Plus versions below 8000, due to an authenticated SQL injection in the alerts module. Public details consistently describe exploitability via the authenticated user in the affected component, enabling attackers to execute arbitrary queries and ...

CVE-2024-36517 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module...

CVE-2024-5467 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...

CVE-2024-5467

CVE-2024-5467 affects Zohocorp ManageEngine ADAudit Plus when running versions below 8121. The authenticated SQL injection vulnerability resides in the account lockout report (and is echoed in related advisories) and could allow an attacker with low privileges and network access to execute arbitr...

CVE-2024-5467 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report...

PT-2024-36554 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8000 Description: The issue concerns an authenticated SQL injection in the reports module. Recommendations: For versions below 8000, update to a version above 8000 to resolve the issue. As a...