Zohocorp ADAudit Plus Vulnerable to Authenticated SQL Injection

CVE-2024-5556

What is CVE-2024-5556?

ManageEngine ADAudit Plus, developed by Zohocorp, is susceptible to an authenticated SQL injection vulnerability affecting versions below 8000. This vulnerability exists within the reports module, where improper handling of user-supplied inputs can allow an attacker to execute arbitrary SQL commands. Exploiting this vulnerability could facilitate unauthorized access to sensitive database information, potentially compromising user data integrity and confidentiality. Organizations utilizing affected versions are strongly advised to upgrade to the latest version to mitigate the risks associated with this vulnerability.

References