Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: ManageEngine ADAudit Plus 8000 Clear all filters
TI-2024-05190 CVE-2024-5586 · GHSA-rpp5-g56w-xpgh

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 48

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05172 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-05164 CVE-2024-5556 · GHSA-c7hp-v8hh-hvgp

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04505 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-05101 CVE-2024-5490 · GHSA-9rwc-r28x-rhwh

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04037 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24290 CVE-2024-36514 · GHSA-7c66-8xr2-45gc

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04037 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24291 CVE-2024-36515 · GHSA-h7p8-gjr9-rp7c

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04505 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24292 CVE-2024-36516 · GHSA-338f-rfqj-8jxw

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 47

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04413 Published 2024-08-23 Fixed in 8000 CWE-89
TI-2024-24293 CVE-2024-36517 · GHSA-v25q-32rr-4cpj

SQL injection in ManageEngine ADAudit Plus

Priority MEDIUM 48

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05279 Published 2024-08-23 Fixed in 8000 CWE-89