ADAudit Plus vulnerabilities

4 known vulnerabilities in ADAudit Plus from ManageEngine. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  ADAudit Plus: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-36516Aug 23, 2024ManageEngineEPSS 4.41%

  Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.

• 8.8 High severity

  ADAudit Plus: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-36515Aug 23, 2024ManageEngineEPSS 4.5%

  Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.

• 7.2 High severity

  ADAudit Plus: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-21791May 22, 2024ManageEngineEPSS 2.15%

  Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.

• 8.8 High severity

  ADAudit Plus: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-0269Feb 2, 2024ManageEngineEPSS 5.37%

  ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.