MA
Product
manageengine_adaudit_plus
On CISA KEVExploited in the wildRansomware-linked
54
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 38Medium 5Low 1
Watch
Add manageengine_adaudit_plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36518 | 5.4 | Aug 12 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard Affected: before 8.1; 8.1; 8.1 |
| CVE-2023-37308 | 5.4 | Jul 7 | Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field Affected: before 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +19 more |
| CVE-2024-36036 | 4.2 | May 27 | Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration Affected: before 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +8 more |
| CVE-2023-50785 | 2.7 | Jan 25 | Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal Affected: 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +7 more |