Skip to content
OpenAdvisories

Product · ManageEngine

ADAudit Plus

37 known vulnerabilities.

ADAudit Plus at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 2 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202620
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202530
May 202550
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 8.1
    NCSC-2025-0167 2 CVEs

    Kwetsbaarheden verholpen in Zoho ManageEngine

    Zoho heeft kwetsbaarheden verholpen in ManageEngine ADSelfService Plus (versies 6513 en eerder) en ManageEngine ADAudit Plus (versies 8510 en eerder).

    ManageEngine
All Critical High Medium Low Exploited only Public exploit

37 results · Feed

  • High 8.8
    CVE-2026-12062

    Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnera…

    ManageEngine ADAudit Plus
  • High 8.8
    CVE-2026-76981

    Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL inje…

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-41444

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-36528

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-27709

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-41407

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-36527 EPSS 42%

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-41403

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-3836

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

    ManageEngine ADAudit Plus
  • High 8.1
    CVE-2025-3834

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-49574

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36485

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5608

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5586

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5556

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5490

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36514

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36515

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36516

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36517

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5467

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36034

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36035

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36518

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5487

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5527

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

    ManageEngine ADAudit Plus
  • Medium 5.5
    CVE-2024-36037

    Insufficient Access Control Vulnerability

    Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.

    ManageEngine ADAudit Plus
  • Medium 4.2
    CVE-2024-36036

    Insufficient Access Control Vulnerability

    Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.

    ManageEngine ADAudit Plus
  • Medium 4.7
    CVE-2024-21791

    SQL Injection in ADAudit Plus

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49335

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49334

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49333

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49332

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49331

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49330

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-0269

    SQL Injection

    ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-0253

    SQL Injection

    ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.

    ManageEngine ADAudit Plus