CVE-2024-5608 HIGH

CVE-2024-5608: SQL Injection

Vendor Manageengine

Product ADAudit Plus

Weakness CWE-89 · SQLi

Published October 24, 2024

Last update October 24, 2024

View on NVD All CVEs

CVSS base score

8.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

Key dates

02Disclosure timeline

October 24, 2024 CVE published

October 24, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-5608 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-31551 WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability CVE-2026-4470 itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection CVE-2024-39677 NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities CVE-2024-3352 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection CVE-2026-3956 xierongwkhd weimai-wetapp Admin_AdminUserController.java getAdmins sql injection