CVE-2024-5487

Summary

CVE-2024-5487 is a newly disclosed vulnerability affecting ManageEngine ADAudit Plus versions below 8.110. This issue allows authenticated attackers to perform SQL injection attacks against the application's export option in the attack surface analyzer component. Successful exploitation of this vulnerability could lead to unauthorized access, data theft, or even system compromise. Users are strongly advised to update to the latest version of ADAudit Plus to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.