Manageengine Adaudit Plus

manageengine_adaudit_plus

Vendor: Zohocorp • 52 CVEs

CVEs (52)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-41444 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Jun 9, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.
CVE-2025-36528 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Jun 9, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.
CVE-2025-27709 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Jun 9, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.
CVE-2025-41407 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 May 23, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
CVE-2025-36527 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 May 23, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.
CVE-2025-41403 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 May 22, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.
CVE-2025-3836 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 May 22, 2025 N/A· v4 8.3 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.
CVE-2025-3834 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 May 14, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.
CVE-2024-49574 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Nov 18, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.
CVE-2024-36485 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Nov 4, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.
CVE-2024-5608 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Oct 24, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.
CVE-2024-5586 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.
CVE-2024-5556 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.
CVE-2024-5490 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.
CVE-2024-5467 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.
CVE-2024-36517 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.
CVE-2024-36516 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have...Show more Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.Show less
CVE-2024-36515 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have...Show more Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.Show less
CVE-2024-36514 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.
CVE-2024-5527 1Zohocorp 1Manageengine Adaudit Plus Jun 17, 2026 Aug 12, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

12 3 Next