Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard.
Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.
References
Link | Resource |
---|---|
https://www.manageengine.com/products/active-directory-audit/cve-2024-36515.html | Vendor Advisory |
Configurations
History
27 Aug 2024, 13:28
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
References | () https://www.manageengine.com/products/active-directory-audit/cve-2024-36515.html - Vendor Advisory | |
First Time |
Zohocorp
Zohocorp manageengine Adaudit Plus |
|
Summary |
|
23 Aug 2024, 14:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-23 14:15
Updated : 2024-08-27 13:28
NVD link : CVE-2024-36515
Mitre link : CVE-2024-36515
CVE.ORG link : CVE-2024-36515
JSON object : View
Products Affected
zohocorp
- manageengine_adaudit_plus
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')