CVE-2022-47966

CVE-2022-47966 (ManageEngine products) is a pre-auth remote code execution vulnerability rooted in the Apache Santuario (XML Security for Java) 1.4.1 library. The XML signature processing in this version can bypass protections, enabling RCE when a SAML SSO flow is engaged by affected ManageEngine...

CVE-2022-28219

Summary of CVE-2022-28219 findings (Zoho ManageEngine ADAudit Plus) : ADAudit Plus versions before build 7060 are vulnerable to an unauthenticated XML External Entity (XXE) injection and a path traversal in the /cewolf endpoint, enabling remote code execution. Public advisories (and multiple secu...

CVE-2020-11532

CVE-2020-11532 affects ManageEngine ADAudit Plus and DataSecurity Plus via the DataEngine Xnode server. Connected sources confirm that default admin credentials can be used to bypass authentication and perform actions with admin privileges, enabling data enumeration of Xnode repositories (e.g., d...

CVE-2020-11531

The CVE-2020-11531 issue affects Zoho ManageEngine DataSecurity Plus prior to 6.0.1, specifically in the DataEngine Xnode Server. The vulnerability arises from not validating the database schema name during DR-SCHEMA-SYNC handling, enabling an authenticated attacker to write a JSP file to the web...

CVE-2022-29457

The CVE-2022-29457 issue is an information-disclosure vulnerability affecting Zoho ManageEngine products: ADSelfService Plus (versions before 6121), ADAuditPlus (before 7060), Exchange Reporter Plus (before 5701), and ADManagerPlus (before 7131). The root cause is NTLM hash disclosure during cert...

CVE-2023-35785

CVE-2023-35785 is a TFA bypass vulnerability affecting Zoho ManageEngine Active Directory 360, ADAudit Plus, ADManager Plus, Asset Explorer, Cloud Security Plus, Data Security Plus, Eventlog Analyzer, Exchange Reporter Plus, Log360, Log360 UEBA, M365 Manager/Security Plus, Recovery Manager Plus, ...

CVE-2025-3834

CVE-2025-3834 affects Zohocorp ManageEngine ADAudit Plus — vulnerable in versions 8510 and prior due to an authenticated SQL injection in the OU History report. Root cause: improper handling of SQL queries in the reports module. Impact: potential unauthorized data exposure/integrity compromise fo...

CVE-2023-32783

The CVE concerns Zoho ManageEngine ADAudit Plus 7.1.1. The event analysis component allows bypassing audit detection by creating or renaming user accounts with a trailing “$” symbol. The vendor states this is not a security bug and is expected behavior. No remediation or fixes are provided in the...

CVE-2023-49332

Zoho ManageEngine ADAudit Plus versions below 7271 are vulnerable to SQL injection when adding file shares. The root cause is an injection flaw in the file share addition workflow, enabling high-privilege impact (C/H/I/H with NETWORK attack surface per the CVE metrics). Red Hat and CVE databases ...

CVE-2023-50785

The issue concerns Zoho ManageEngine ADAudit Plus prior to build 7270, which is affected by a directory traversal vulnerability that allows admin users to view names of arbitrary directories outside the designated installation directory. The root cause is path traversal (no exploitation details p...

CVE-2021-42847

Product affected: ManageEngine ADAudit Plus, versions before 7006. Vulnerability: Arbitrary file write that enables authenticated users to write and execute files via the alert_script mechanism, enabling remote code execution (RCE) under the account running ADAudit Plus. Root cause / vector: Expl...

CVE-2022-24978

CVE-2022-24978 affects Zoho ManageEngine ADAudit Plus versions prior to 7055, enabling authenticated privilege escalation on integrated products due to a password field in a JSON response. The issue is documented across multiple sources (Red Hat, CNVD, CVE list, PT-Security) with a recommended re...

CVE-2024-36036

Zoho ManageEngine ADAudit Plus is affected by an insufficient access control vulnerability in versions 7260 and below, allowing unauthorized local agent-machine users to access sensitive information and modify the agent configuration. The issue is described as a security bypass/information-disclo...

CVE-2025-41444

CVE-2025-41444 affects Zohocorp ManageEngine ADAudit Plus (versions 8510 and prior). The vulnerability is an authenticated SQL injection in the alerts module, with CVSSv3.1 base metrics showing HIGH impact on confidentiality and integrity, LOW impact on availability, and an overall base score of ...

CVE-2023-48792

CVE-2023-48792 affects Zoho ManageEngine ADAudit Plus up to build 7250, with SQL injection in the report export option. This vulnerability is rated CVSS v3.1 9.8 (CRITICAL) with network attack vector, no authentication, no user interaction, and impacts to confidentiality, integrity, and availabil...

CVE-2024-36037

Zoho ManageEngine ADAudit Plus (Windows AD management tool) is affected by CVE-2024-36037 due to an insufficient access control flaw. Versions 7260 and below expose session recordings to unauthorized local agent machine users. The root cause is improper access control, enabling viewing of other u...

CVE-2023-6105

Technical details about CVE-2023-6105 are not publicly provided in the supplied documents; monitor for updates.

CVE-2023-49331

CVE-2023-49331 concerns Zoho ManageEngine ADAudit Plus, with versions below 7271 affected by SQL injection in the aggregate reports search option. The vulnerability description across sources consistently states that the issue allows injection through user-controllable input in the aggregate repo...

CVE-2020-24786

CVE-2020-24786 affects multiple ManageEngine products (Exchange Reporter Plus, AD360, ADSelfService Plus, DataSecurity Plus, RecoverManager Plus, EventLog Analyzer, ADAudit Plus, O365 Manager Plus, Cloud Security Plus, ADManager Plus, Log360) with a remotely accessible Java servlet (com.manageeng...

CVE-2023-49335

CVE-2023-49335 affects Zoho ManageEngine ADAudit Plus before build 7271. The issue is a SQL injection vulnerability when obtaining file server details, as documented across multiple sources. Impact is stated as high, with potential disclosure/integrity/availability concerns for affected installat...

CVE-2024-21791

CVE-2024-21791 affects Zoho ManageEngine ADAudit Plus versions below 7271, where a SQL injection in the Lock History option is possible. Root cause: input handling in the lockout history path enables SQL injection. Impact stated in sources includes high confidentiality, integrity, and availabilit...

CVE-2024-5467

CVE-2024-5467 affects Zohocorp ManageEngine ADAudit Plus when running versions below 8121. The authenticated SQL injection vulnerability resides in the account lockout report (and is echoed in related advisories) and could allow an attacker with low privileges and network access to execute arbitr...

CVE-2024-36034

Summary : CVE-2024-36034 affects Zohocorp ManageEngine ADAudit Plus versions below 8003. The vulnerability is an authenticated SQL Injection in the aggregate reports search option. The root cause is not detailed beyond the search option being injectable, and no exploit details are provided in the...

CVE-2025-36528

CVE-2025-36528 affects Zohocorp ManageEngine ADAudit Plus versions 8510 and earlier. The issue is an authenticated SQL injection in the Service Account Auditing reports, caused by vulnerable query handling in that reporting path. Per connected sources, exploitation could impact confidentiality an...

CVE-2024-0253

CVE-2024-0253 affects ManageEngine ADAudit Plus versions 7270 and below, due to an Authenticated SQL injection in the home Graph-Data component. The issue is addressed by upgrading to a version above 7270 (e.g., 7271+ as referenced by multiple sources). No exploit details are provided in the supp...

CVE-2025-3836

CVE-2025-3836 affects Zohocorp ManageEngine ADAudit Plus versions 8.5.10 and earlier, with an authenticated SQL injection in the logon events aggregate report. The root cause is an injection vulnerability exploitable by an authenticated user when accessing the logon events aggregate report. The i...

CVE-2023-48793

CVE-2023-48793 affects Zoho ManageEngine ADAudit Plus; versions through 7250 are susceptible to SQL injection in the aggregate report feature. The issue is supported by multiple sources (NVD/RH/CNNVD) with a CVSS v3.1 base score of 9.8 (CRITICAL). Remediation per the provided docs is to update to...

CVE-2023-49334

Zoho ManageEngine ADAudit Plus is vulnerable prior to build 7271 due to an SQL Injection in the full summary report export. Affected component: ADAudit Plus report export. Impact: potential unauthorized data disclosure and modification (high), in line with CVSS metrics. Root cause: improper input...

CVE-2025-36527

CVE-2025-36527 affects Zohocorp ManageEngine ADAudit Plus versions below 8511. The issue is a SQL injection during report export , with CVSS 3.1 base score 8.3 (HIGH). Connected sources also reference a fix recommendation: upgrade to version 8511 or later to resolve the vulnerability. A temporary...

CVE-2023-49330

CVE-2023-49330 concerns Zoho ManageEngine ADAudit Plus. Affected versions are those below build 7271, where the issue enables SQL injection when fetching aggregated report data. The root cause is unsafely handling aggregate-report data that allows injection, leading to potential data disclosure o...

CVE-2023-49333

CVE-2023-49333 affects Zoho ManageEngine ADAudit Plus versions below 7271, where the dashboard graph feature is vulnerable to SQL injection due to insufficient input handling. This could enable unauthorized access to data or manipulation via the dashboard graph component. A fixed version is 7271;...

CVE-2025-27709

Affected product: Zohocorp ManageEngine ADAudit Plus, versions 8510 and prior. Description: authenticated SQL injection in the Service Account Auditing reports (root cause per sources). Impact: CVSSv3.1 base score 8.3 (HIGH) with confidentiality and integrity impacts; exploitation details not pro...

CVE-2025-41403

CVE-2025-41403 affects Zohocorp ManageEngine ADAudit Plus versions 8510 and earlier. The vulnerability is an authenticated SQL injection when fetching service account audit data, leading to potential exposure of sensitive information or data integrity issues. The CVSS v3.1 base score is 8.3 (HIGH...

CVE-2024-36518

ManageEngine ADAudit Plus before build 8110 is affected by authenticated SQL Injection in the attack surface analyzer’s dashboard due to inadequate SQL query protection. The issue could allow an attacker with valid credentials to access or exfiltrate data from the application’s database through t...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus, prior to version 8511, has a SQL injection vulnerability in the OU History report. Root cause: improper handling of input in the OU History reporting path leading to SQL injection. Impact: potential unauthorized access or data disclosure from affected installat...

CVE-2024-49574

Affected software: ManageEngine ADAudit Plus. Versions below build 8123 are vulnerable to a SQL injection flaw in the reports module. Root cause: improper handling of SQL queries in the reports component leading to injection. Impact: high confidentiality and integrity impact; partial availability...

CVE-2024-5527

CVE-2024-5527 affects Zohocorp ManageEngine ADAudit Plus versions below 8110. The vulnerability is an authenticated SQL Injection in the file auditing configuration, caused by unsafe handling of input in that configuration. Impact is described as high for confidentiality, integrity, and availabil...

CVE-2024-5487

CVE-2024-5487 affects Zohocorp ManageEngine ADAudit Plus versions below 8110. It is an authenticated SQL Injection vulnerability in the attack surface analyzer’s export option, with CVSS: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD) and base score 8.8 HIGH. Red Hat and other feeds corroborate the is...

CVE-2024-36485

The CVE-2024-36485 entry concerns Zohocorp ManageEngine ADAudit Plus. Affected product: ADAudit Plus (ManageEngine) prior to version 8121. Vulnerability: SQL Injection in the Technician reports option, caused by improper handling of input in that feature. Impact: potential unauthorized access to ...

CVE-2024-36035

CVE-2024-36035 affects Zoho ManageEngine ADAudit Plus, prior to build 8003. The issue is an authenticated SQL injection in the user session recording feature. Known impact is high (CVE/NVD metrics show Confidentiality/Integrity/Availability concerns; base score up to 8.8). Remediation is to upgra...

CVE-2024-0269

CVE-2024-0269 affects ManageEngine ADAudit Plus 7270 and earlier, with an authenticated SQL injection in the File-Summary DrillDown feature. The root cause is an SQL injection vulnerability within that drill-down path, allowing an attacker with valid credentials to potentially access or manipulat...

CVE-2024-36515

CVE-2024-36515 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The issue is an authenticated SQL injection in the dashboard component, due to improper handling of inputs in dashboard queries. The impact is described as high in the CVE entries. No remediation steps are provided in ...

CVE-2024-36516

CVE-2024-36516 affects Zohocorp ManageEngine ADAudit Plus versions below 8000, where an authenticated SQL injection vulnerability exists in the dashboard. The issue targets the dashboard component and is distinct from CVE-2024-36515 (also affecting the ADAudit Plus dashboard). Public descriptions...

CVE-2024-5608

CVE-2024-5608 affects ManageEngine ADAudit Plus before version 8121. The issue is a SQL Injection in the technician reports feature, enabling an attacker with network access and low privileges to access/modify data (high confidentiality and integrity impact; no availability impact stated). No exp...

CVE-2018-10466

Zoho ManageEngine ADAudit Plus is affected by CVE-2018-10466: a SQL injection vulnerability in ADAudit Plus before version 5.0.0 build 5100. Root cause is unsafe handling of input that enables blind SQL injection, allowing a remote attacker to execute arbitrary SQL commands (impacting confidentia...

CVE-2024-36514

CVE-2024-36514 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. The issue is an authenticated SQL injection in the file summary option, enabling an attacker with low privileges and no user interaction to exploit it over the network. The vulnerability is confirmed across multiple fe...

CVE-2024-36517

CVE-2024-36517 affects Zohocorp ManageEngine ADAudit Plus versions below 8000, due to an authenticated SQL injection in the alerts module. Public details consistently describe exploitability via the authenticated user in the affected component, enabling attackers to execute arbitrary queries and ...

CVE-2023-37308

Product : Zoho ManageEngine ADAudit Plus. Vulnerability : Cross-site Scripting (XSS) via the username field in builds prior to 7100 . Root cause / impact : Malicious JavaScript could be executed when authorized users load reports. Affected versions : ADAudit Plus before 7100. Remediation : Upgrad...

CVE-2024-5586

CVE-2024-5586 affects Zohocorp ManageEngine ADAudit Plus

CVE-2024-5490

CVE-2024-5490 affects Zohocorp ManageEngine ADAudit Plus versions below 8000. An authenticated SQL injection vulnerability exists in the aggregate reports option due to improper query handling, with high impact (C/I/A) per listed CVSS metrics. Affected part: aggregate reports functionality. Explo...