Vulnerabilities (CVE)

Filtered by vendor Zohocorp Subscribe
Filtered by product Manageengine Adaudit Plus
Total 52 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-41444 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.
CVE-2025-41407 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
CVE-2025-41403 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.
CVE-2025-3836 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.
CVE-2025-3834 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.1 HIGH
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.
CVE-2025-36528 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.
CVE-2025-36527 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.
CVE-2025-27709 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.
CVE-2024-5608 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.
CVE-2024-5586 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.
CVE-2024-5556 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.
CVE-2024-5527 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.
CVE-2024-5490 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.
CVE-2024-5487 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.
CVE-2024-5467 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.
CVE-2024-49574 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.
CVE-2024-36518 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.
CVE-2024-36517 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.
CVE-2024-36516 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.
CVE-2024-36515 1 Zohocorp 1 Manageengine Adaudit Plus 2026-06-17 N/A 8.3 HIGH
Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.