CVE-2023-49331

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option

High · published May 20, 2024

CVSS v3.1
8.3
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.03005 · 87.3th percentile
Published
2024-05-20T17:35Z
EPSS history
Timeline
  • 20 MAY 17:35Z
    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option
    cvelistv5