Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.
References
Link | Resource |
---|---|
https://www.manageengine.com/products/active-directory-audit/cve-2024-36517.html | Vendor Advisory |
Configurations
History
27 Aug 2024, 13:29
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:* | |
References | () https://www.manageengine.com/products/active-directory-audit/cve-2024-36517.html - Vendor Advisory | |
Summary |
|
|
First Time |
Zohocorp
Zohocorp manageengine Adaudit Plus |
23 Aug 2024, 14:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-23 14:15
Updated : 2024-08-27 13:29
NVD link : CVE-2024-36517
Mitre link : CVE-2024-36517
CVE.ORG link : CVE-2024-36517
JSON object : View
Products Affected
zohocorp
- manageengine_adaudit_plus
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')