CVE-2024-36514

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.
Configurations

Configuration 1 (hide)

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*

History

27 Aug 2024, 13:28

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 8.3
v2 : unknown
v3 : 8.8
References () https://www.manageengine.com/products/active-directory-audit/cve-2024-36514.html - () https://www.manageengine.com/products/active-directory-audit/cve-2024-36514.html - Vendor Advisory
Summary
  • (es) Las versiones de Zohocorp ManageEngine ADAudit Plus inferiores a 8000 son vulnerables a la inyección SQL autenticada en la opción de resumen de archivos.
First Time Zohocorp
Zohocorp manageengine Adaudit Plus
CPE cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*

23 Aug 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-23 14:15

Updated : 2024-08-27 13:28


NVD link : CVE-2024-36514

Mitre link : CVE-2024-36514

CVE.ORG link : CVE-2024-36514


JSON object : View

Products Affected

zohocorp

  • manageengine_adaudit_plus
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')