Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.2:7200:*:*:*:*:*:*

part: a version: 7.2 update: 7200

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Adaudit Plus (3794d677-c3f5-5c1b-ba18-a97145cbdafa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36037 vulnerable 2026-06-08 06:39:43.534417 Insufficient Access Control Vulnerability
MEDIUM (5.5)
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.
Published: 2024-05-27T17:59:52.711Z
Updated: 2024-10-25T18:58:51.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36036 vulnerable 2026-06-08 06:39:43.522024 Insufficient Access Control Vulnerability
MEDIUM (4.2)
Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.
Published: 2024-05-27T17:58:16.113Z
Updated: 2024-10-31T15:21:20.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21791 vulnerable 2026-06-08 06:27:36.644948 SQL Injection in ADAudit Plus
MEDIUM (4.7)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.
Published: 2024-05-22T18:05:23.307Z
Updated: 2024-08-01T22:27:36.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0269 vulnerable 2026-06-08 06:22:00.218591 SQL Injection
HIGH (8.3)
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
Published: 2024-02-02T13:05:35.762Z
Updated: 2024-08-01T17:41:16.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0253 vulnerable 2026-06-08 06:22:00.156512 SQL Injection
HIGH (8.3)
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.
Published: 2024-02-02T12:50:35.088Z
Updated: 2024-08-01T17:41:16.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6105 vulnerable 2026-06-08 06:19:45.648655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50785 vulnerable 2026-06-08 06:16:16.675291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49335 vulnerable 2026-06-08 06:14:29.026519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49334 vulnerable 2026-06-08 06:14:29.024989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49333 vulnerable 2026-06-08 06:14:29.023798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49332 vulnerable 2026-06-08 06:14:29.021869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49331 vulnerable 2026-06-08 06:14:29.020414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49330 vulnerable 2026-06-08 06:14:29.019015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48793 vulnerable 2026-06-08 06:14:28.082624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48792 vulnerable 2026-06-08 06:14:28.074297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35785 vulnerable 2026-06-08 06:06:27.590016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.