Vulnerability in ManageEngine ADAudit Plus

CVE-2024-36518

What is CVE-2024-36518?

The vulnerability in ZohoCorp's ManageEngine ADAudit Plus stems from an authenticated SQL injection issue present in the attack surface analyzer's dashboard. This flaw allows attackers with valid credentials to execute arbitrary SQL queries, potentially leading to unauthorized access to sensitive information stored in the system's database. Organizations using versions of ADAudit Plus earlier than 8110 should implement proper security measures and consider upgrading to the latest version to mitigate potential risks.

References