Skip to content
OpenAdvisories

Product · ManageEngine

ADAudit Plus

37 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

34 results · Clear filters · Feed

  • High 8.8
    CVE-2026-12062

    Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnera…

    ManageEngine ADAudit Plus
  • High 8.8
    CVE-2026-76981

    Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL inje…

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-41444

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-36528

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-27709

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-41407

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-36527 EPSS 42%

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-41403

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2025-3836

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

    ManageEngine ADAudit Plus
  • High 8.1
    CVE-2025-3834

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-49574

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36485

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5608

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5586

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5556

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5490

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36514

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36515

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36516

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36517

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5467

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36034

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36035

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-36518

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5487

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-5527

    SQL Injection

    Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49335

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49334

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49333

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49332

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49331

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2023-49330

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-0269

    SQL Injection

    ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.

    ManageEngine ADAudit Plus
  • High 8.3
    CVE-2024-0253

    SQL Injection

    ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.

    ManageEngine ADAudit Plus