ManageEngine ADAudit Plus
Moderate fix1 remedy
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 8511
ManageEngine ADAudit Plus Authenticated SQL Injection Vulnerability in OU History Report
Vulnerability
Patched
A high-severity SQL injection vulnerability has been identified in ManageEngine ADAudit Plus versions through 8510. This vulnerability allows authenticated users to inject malicious SQL queries into the OU History report, potentially leading to unauthorized database access.
Impact
Exploitation of this vulnerability could enable authenticated users to execute arbitrary SQL queries, allowing them to access and manipulate database entries related to the OU History report.
Remediation
Users can upgrade to ManageEngine ADAudit Plus build 8511 to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
2.5exploitability
5.2remediation
7.7relevance
0.0threat
0.1urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.