Volerion logoVolerion
Volerion logoVolerion

ManageEngine ADAudit Plus SQL Injection Vulnerability in OU History Report

Vulnerability

A SQL injection vulnerability has been identified in ManageEngine ADAudit Plus versions prior to 8511. This vulnerability affects the API that retrieves data for the OU History report, allowing authenticated users to execute custom SQL queries and access database entries through the vulnerable request.

Impact

Exploitation of this vulnerability could enable an authenticated user to manipulate SQL queries, potentially leading to unauthorized data access or modification in the database.

Remediation

Users can upgrade to ManageEngine ADAudit Plus build 8511 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
2.5
exploitability
5.2
remediation
7.7
relevance
0.0
threat
0.1
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.