CVE-2024-36485

NVD Published Date: November 04, 2024 at 12:16 PM

NVD Last Modified: November 07, 2024 at 11:15 AM

Download Patch

Vulnerability ID

CVE-2024-36485

Severity

HIGH

Severity Score

8.8

Summary

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

References

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-89

KB5002639

KB5002640

CVE-2024-10732

CVE-2024-10733

KB5042207

KB5042209

See SecOps Solution
in action

Schedule Demo