Vulnerabilities

TI-2023-26949 CVE-2023-49335 · GHSA-xhvq-7mc2-jx9w

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.

MEDIUM 46

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03005 Published 2024-05-20 Fixed in 7271 CWE-89

TI-2023-26948 CVE-2023-49334 · GHSA-5vcp-m87w-9x8h

MEDIUM 46

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03005 Published 2024-05-20 Fixed in 7271 CWE-89

TI-2023-26947 CVE-2023-49333 · GHSA-7chq-mr2c-3p6c

MEDIUM 46

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03005 Published 2024-05-20 Fixed in 7271 CWE-89

TI-2023-26946 CVE-2023-49332 · GHSA-3c77-6pw4-hr87

MEDIUM 46

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03005 Published 2024-05-20 Fixed in 7271 CWE-89

TI-2023-26945 CVE-2023-49331 · GHSA-448x-875q-xjq4

MEDIUM 46

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03005 Published 2024-05-20 Fixed in 7271 CWE-89

TI-2023-26944 CVE-2023-49330 · GHSA-hp7j-hj47-34vh

MEDIUM 44

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02288 Published 2024-05-20 Fixed in 7271 CWE-89