CVE-2024-49574
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 18, 2024
Updated: Nov 20, 2024
CWE ID 89
Summary
CVE-2024-49574 is a newly disclosed vulnerability affecting versions of Zohocorp ManageEngine ADAudit Plus below 8123. The issue resides in the reports module and permits SQL Injection attacks. An attacker can exploit this flaw to gain unauthorized access to sensitive data or execute malicious SQL commands, potentially leading to serious security implications for affected organizations. It is strongly advised that users upgrade to a patched version of ADAudit Plus as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- ADAudit Plus
Affected Vendors
- Zoho Corporation