CVE-2023-49334

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report...

CVE-2023-49333

CVE-2023-49333 affects Zoho ManageEngine ADAudit Plus versions below 7271, where the dashboard graph feature is vulnerable to SQL injection due to insufficient input handling. This could enable unauthorized access to data or manipulation via the dashboard graph component. A fixed version is 7271;...

CVE-2023-49333

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature...

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 are vulnerable to SQL injection when adding file shares. The root cause is an injection flaw in the file share addition workflow, enabling high-privilege impact (C/H/I/H with NETWORK attack surface per the CVE metrics). Red Hat and CVE databases ...

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...

CVE-2023-49331

CVE-2023-49331 concerns Zoho ManageEngine ADAudit Plus, with versions below 7271 affected by SQL injection in the aggregate reports search option. The vulnerability description across sources consistently states that the issue allows injection through user-controllable input in the aggregate repo...

CVE-2023-49331

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option...

CVE-2023-49331

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option...

CVE-2024-27312

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability...

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

CVE-2024-27312

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability...

CVE-2024-27312 Authorization vulnerability in PAM360

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability...

CVE-2024-27312 Authorization vulnerability in PAM360

Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability...

CVE-2023-49330

CVE-2023-49330 concerns Zoho ManageEngine ADAudit Plus. Affected versions are those below build 7271, where the issue enables SQL injection when fetching aggregated report data. The root cause is unsafely handling aggregate-report data that allows injection, leading to potential data disclosure o...

CVE-2023-49330

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data...

ZOHO ManageEngine PAM360 安全漏洞

ZOHO ManageEngine PAM360 is a complete PAM software from ZOHO, Inc. It provides complete privileged access security for your IT infrastructure. A security vulnerability exists in Zoho ManageEngine PAM360 version 6601, which stems from allowing a low-privileged user to perform administrative...

PT-2024-21814 · Zohocorp · Manageengine Pam360

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine PAM360 version 6601 Description: The issue allows a low-privileged user to perform admin actions due to an authorization vulnerability. Recommendations: For Zohocorp ManageEngine PAM360 version 6601, update to a version...

PT-2024-13726 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions below 7271 Description: The issue allows SQL injection in the dashboard graph feature. This could potentially lead to remote attacks and data compromise. Recommendations: For Zoho ManageEngine ADAudit...