Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.2:7270:*:*:*:*:*:*

part: a version: 7.2 update: 7270

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Adaudit Plus (3794d677-c3f5-5c1b-ba18-a97145cbdafa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21791 vulnerable 2026-06-03 14:54:50.777726 SQL Injection in ADAudit Plus
MEDIUM (4.7)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.
Published: 2024-05-22T18:05:23.307Z
Updated: 2024-08-01T22:27:36.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0269 vulnerable 2026-06-03 14:54:02.054286 SQL Injection
HIGH (8.3)
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
Published: 2024-02-02T13:05:35.762Z
Updated: 2024-08-01T17:41:16.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0253 vulnerable 2026-06-03 14:54:02.012089 SQL Injection
HIGH (8.3)
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.
Published: 2024-02-02T12:50:35.088Z
Updated: 2024-08-01T17:41:16.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49335 vulnerable 2026-06-03 14:53:20.693339 Details available
HIGH (8.3)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.
Published: 2024-05-20T17:55:49.809Z
Updated: 2024-08-02T21:53:44.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49334 vulnerable 2026-06-03 14:53:20.692572 Details available
HIGH (8.3)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.
Published: 2024-05-20T17:55:14.220Z
Updated: 2024-08-02T21:53:45.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49333 vulnerable 2026-06-03 14:53:20.691694 Details available
HIGH (8.3)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.
Published: 2024-05-20T17:51:50.719Z
Updated: 2024-08-02T21:53:45.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49332 vulnerable 2026-06-03 14:53:20.690923 Details available
HIGH (8.3)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.
Published: 2024-05-20T17:45:36.459Z
Updated: 2024-08-02T21:53:45.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49331 vulnerable 2026-06-03 14:53:20.690024 Details available
HIGH (8.3)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.
Published: 2024-05-20T17:35:49.217Z
Updated: 2024-08-02T21:53:44.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49330 vulnerable 2026-06-03 14:53:20.689235 Details available
HIGH (8.3)
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.
Published: 2024-05-20T12:19:59.734Z
Updated: 2024-08-02T21:53:45.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48793 vulnerable 2026-06-03 14:53:19.837975 Details available
Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature.
Published: 2024-02-02T00:00:00.000Z
Updated: 2025-06-11T16:59:05.641Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.