CVE-2024-36518

Summary

CVE-2024-36518 is a newly disclosed vulnerability affecting ManageEngine ADAudit Plus versions prior to 8.110. This issue grants authenticated attackers the ability to execute SQL injection attacks on the application's dashboard. By manipulating input fields, adversaries can potentially access sensitive data, modify system configurations, or even gain unauthorized access, posing a significant risk to organizations using the vulnerable version of ADAudit Plus. It is recommended that users upgrade to the latest version or apply relevant patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.