Known vulnerabilities in Zoho ManageEngine ADAudit Plus 7054

Known vulnerabilities in Zoho ManageEngine ADAudit Plus 7054

Vendor: Zoho Corporation

Software: Zoho ManageEngine ADAudit Plus

Version: 7054

Software CPE: cpe:2.3:a:zohocorp:adaudit_plus:*:*:*:*:*:*:*:*

Website: https://www.zohocorp.com/index.html

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU98752 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-36518	CWE-89	Medium	No	No	8110	16.10.2024	SB2024101676
#VU98751 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-5527	CWE-89	Medium	No	No	8110	16.10.2024	SB2024101676
#VU98750 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-5487	CWE-89	Medium	No	No	8110	16.10.2024	SB2024101676
#VU98749 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-5586	CWE-89	Medium	No	No	8121	16.10.2024	SB2024101677
#VU98748 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	CWE-89	Medium	No	No	8003	16.10.2024	SB2024101675
#VU98747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-36517	CWE-89	Medium	No	No	8000	16.10.2024	SB2024101674
#VU98746 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-5467	CWE-89	Medium	No	No	8121	16.10.2024	SB2024101677
#VU77579 - Security Features CVE-2023-35785	CWE-254	Medium	No	No	7203	21.06.2023	SB2023062103 SB2023062104 SB2023062105 and 4 more
#VU71140 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Medium	No	No	7100	12.01.2023	SB2023011261
#VU64906 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2022-28219	CWE-611	High	Public exploit available	No	7060	04.07.2022	SB2022070426