Back to feed
EUVD-2024-19405 · Published May 22, 2024
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.
Technologies
Zohocorp Manageengine Adaudit Plus
Weaknesses
CWE-89
CVSS scores
- v3.17.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
