Show filters
36 Total Results
Displaying 11-20 of 36
Sort by:
Attacker Value
Unknown

CVE-2024-36517

Disclosure Date: August 23, 2024 (last updated August 28, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.
Attacker Value
Unknown

CVE-2024-36516

Disclosure Date: August 23, 2024 (last updated August 28, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.
Attacker Value
Unknown

CVE-2024-36515

Disclosure Date: August 23, 2024 (last updated August 28, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.
Attacker Value
Unknown

CVE-2024-36514

Disclosure Date: August 23, 2024 (last updated August 28, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.
Attacker Value
Unknown

CVE-2024-5527

Disclosure Date: August 12, 2024 (last updated August 17, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.
Attacker Value
Unknown

CVE-2024-5487

Disclosure Date: August 12, 2024 (last updated August 17, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.
Attacker Value
Unknown

CVE-2024-36518

Disclosure Date: August 12, 2024 (last updated January 05, 2025)
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.
Attacker Value
Unknown

CVE-2024-36035

Disclosure Date: August 12, 2024 (last updated August 17, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.
Attacker Value
Unknown

CVE-2024-36034

Disclosure Date: August 12, 2024 (last updated August 17, 2024)
Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.
Attacker Value
Unknown

CVE-2024-36037

Disclosure Date: May 27, 2024 (last updated December 21, 2024)
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.