Zohocorp ADAudit Plus Versions Below 8000 Vulnerable to Authenticated SQL Injection

CVE-2024-36516

What is CVE-2024-36516?

The vulnerability allows an authenticated user to perform a SQL injection attack against the dashboard of the affected versions of ManageEngine ADAudit Plus. This flaw enables attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive information or database compromise. Users of ADAudit Plus versions prior to 8000 are advised to apply patches or updates to mitigate these risks promptly.

References