Known vulnerabilities in Zoho Corporation Zoho ManageEngine ADAudit Plus

Vendor: Zoho Corporation
Website: https://www.zohocorp.com/index.html
Total Security Bulletins: 11

Security bulletins (11)

Secuity bulletin Severity Status Published
SB2024120363: Authenticated SQL injection in ManageEngine ADAudit Plus Medium
Patched
03.12.2024
SB2024101677: Multiple SQL injection vulnerabilities in Zoho ManageEngine ADAudit Plus Medium
Patched
16.10.2024
SB2024101676: Multiple vulnerabilities in Zoho ManageEngine ADAudit Plus Medium
Patched
16.10.2024
SB2024101675: Authenticated SQL injection in ManageEngine ADAudit Plus Medium
Patched
16.10.2024
SB2024101674: SQL injection in ManageEngine ADAudit Plus Medium
Patched
16.10.2024
SB2023062602: Security restrictions bypass in ADAudit Plus Medium
Patched
26.06.2023
SB20230509123: Privilege escalation in Zoho ManageEngine ADAudit Plus Medium
Patched
09.05.2023
SB2023011718: Remote code execution in multiple Zoho ManageEngine products Critical
Patched Exploited
17.01.2023
SB2023011261: Stored XSS in ADAudit Plus logon failure reports Medium
Patched
12.01.2023
SB2022070426: XXE in Zoho ManageEngine ADAudit Plus High
Patched Public exploit
04.07.2022
SB2021111150: Arbitrary file upload in Zoho ManageEngine ADAudit Plus Medium
Patched Public exploit
11.11.2021