Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

52 records

Vendor: Zohocorp Component: Manageengine Adaudit Plus Clear all filters
TI-2025-27605 CVE-2025-41444 · GHSA-6cqj-wv5p-8qf4

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 41

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01715 Published 2025-06-09 Fixed in 8511 CWE-89
TI-2025-24865 CVE-2025-36528 · GHSA-9p3j-mhgp-fq28

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 41

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01715 Published 2025-06-09 Fixed in 8511 CWE-89
TI-2025-20503 CVE-2025-27709 · GHSA-wpv4-g2wc-qxqh

SQL injection in ManageEngine ADAudit Plus

Priority LOW 39

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01715 Published 2025-06-09 Fixed in 8511 CWE-89
TI-2025-27579 CVE-2025-41407 · GHSA-c4wh-v84h-4q8g

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 41

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.0153 Published 2025-05-23 Fixed in 8511 CWE-89
TI-2025-24864 CVE-2025-36527 · GHSA-456f-p7fp-957g

SQL injection in ManageEngine ADAudit Plus

Priority HIGH 66

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.41989 Published 2025-05-23 Fixed in 8511 CWE-89
TI-2025-27576 CVE-2025-41403 · GHSA-x7r7-9j4g-5qrp

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 42

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.01821 Published 2025-05-22 Fixed in 8511 CWE-89
TI-2025-03386 CVE-2025-3836 · GHSA-4w7r-x646-644r

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.06142 Published 2025-05-22 Fixed in 8511 CWE-89
TI-2025-03384 CVE-2025-3834 · GHSA-8qhh-qg7r-qg2v

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 41

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01726 Published 2025-05-14 Fixed in 8511 CWE-89
TI-2024-33073 CVE-2024-49574 · GHSA-rc9f-q3jv-fx7r

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 46

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03616 Published 2024-11-18 Fixed in 8123 CWE-89
TI-2024-24263 CVE-2024-36485 · GHSA-g7rx-xjjw-j9xq

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 46

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03227 Published 2024-11-04 Fixed in 8121 CWE-89
TI-2024-05209 CVE-2024-5608 · GHSA-9pvp-765c-8gcx

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 43

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.02524 Published 2024-10-24 Fixed in 8121 CWE-89
TI-2024-05190 CVE-2024-5586 · GHSA-rpp5-g56w-xpgh

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 48

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05172 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-05164 CVE-2024-5556 · GHSA-c7hp-v8hh-hvgp

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04505 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-05101 CVE-2024-5490 · GHSA-9rwc-r28x-rhwh

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04037 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24290 CVE-2024-36514 · GHSA-7c66-8xr2-45gc

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04037 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24291 CVE-2024-36515 · GHSA-h7p8-gjr9-rp7c

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04505 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24292 CVE-2024-36516 · GHSA-338f-rfqj-8jxw

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04413 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24293 CVE-2024-36517 · GHSA-v25q-32rr-4cpj

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 48

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05279 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-05081 CVE-2024-5467 · GHSA-fmxx-4w94-fc85

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04517 Published 2024-08-23 Fixed in 8121 CWE-89
TI-2024-23891 CVE-2024-36034 · GHSA-mp7v-r97w-f9j9

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 50

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07373 Published 2024-08-12 No fix listed CWE-89
TI-2024-23892 CVE-2024-36035 · GHSA-3mp6-8h5j-hwh9

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 50

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07373 Published 2024-08-12 No fix listed CWE-89
TI-2024-24294 CVE-2024-36518 · GHSA-rvh8-75gg-f2cc

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 44

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.03117 Published 2024-08-12 No fix listed CWE-89
TI-2024-05098 CVE-2024-5487 · GHSA-xrf6-53r6-98w9

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 48

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04741 Published 2024-08-12 No fix listed CWE-89
TI-2024-05138 CVE-2024-5527 · GHSA-hh35-wc7m-9qm9

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 48

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04702 Published 2024-08-12 No fix listed CWE-89
TI-2024-23894 CVE-2024-36037

Insufficient access control in ManageEngine ADAudit Plus

Priority LOW 25

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00458 Published 2024-05-27 Fixed in 7270 CWE-863
Load more