ManageEngine ADAudit Plus
Moderate fix1 remedy
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 8511
ManageEngine ADAudit Plus Authenticated SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in ManageEngine ADAudit Plus versions through 8510. This vulnerability allows authenticated users to inject malicious SQL queries while retrieving service account audit data, potentially leading to unauthorized database access.
Impact
Exploitation of this vulnerability could enable authenticated users to execute arbitrary SQL queries, allowing them to access and manipulate database information.
Remediation
Users can upgrade to ManageEngine ADAudit Plus build 8511 to address this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
2.5exploitability
5.2remediation
7.7relevance
0.0threat
0.1urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.