CVE-2023-48792: SQL Injection
Published Feb 2, 2024
·Updated
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option.
Affected Software
11 affected components
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
Event History
Feb 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-48792?
The severity of CVE-2023-48792 is classified as critical due to its potential impact on sensitive data.
2
How do I fix CVE-2023-48792?
To fix CVE-2023-48792, users should upgrade to the latest version of Zoho ManageEngine ADAudit Plus, specifically beyond version 7.2.
3
What systems are affected by CVE-2023-48792?
CVE-2023-48792 affects all versions of Zoho ManageEngine ADAudit Plus up to version 7.2.
4
What type of vulnerability is CVE-2023-48792?
CVE-2023-48792 is identified as a SQL Injection vulnerability specifically within the report export option.
5
Can CVE-2023-48792 be exploited remotely?
Yes, CVE-2023-48792 can be exploited remotely, allowing attackers to execute malicious SQL commands.