CVE-2023-49331 HIGH

CVE-2023-49331

Vendor Manageengine
Product ADAudit Plus
Published May 20, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

Key dates

02Disclosure timeline

May 20, 2024 CVE published
August 2, 2024 Record updated