PT-2024-13726
CVE-2023-49333
·
Published
2024-05-20
·
Updated
2025-05-09
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine ADAudit Plus versions below 7271
Description
The issue allows SQL injection in the dashboard graph feature. This could potentially lead to remote attacks and data compromise.
Recommendations
For Zoho ManageEngine ADAudit Plus versions below 7271, upgrade the affected component immediately to resolve the issue. As a temporary workaround, consider restricting access to the dashboard graph feature until the upgrade is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾