CVE-2023-49331: SQL Injection
Published May 20, 2024
·Updated
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.
Affected Software
16 affected components
Zoho ManageEngine ADAudit Plus<7271
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
ZohoCorp ManageEngine ADAudit Plus=7.2-7270
Event History
May 20, 2024
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-49331?
CVE-2023-49331 is classified as a critical vulnerability due to its ability to allow SQL injection.
2
How do I fix CVE-2023-49331?
To fix CVE-2023-49331, upgrade Zoho ManageEngine ADAudit Plus to version 7271 or later.
3
What types of attacks can exploit CVE-2023-49331?
CVE-2023-49331 can be exploited to perform SQL injection attacks, potentially allowing unauthorized access to data.
4
Which versions of Zoho ManageEngine ADAudit Plus are affected by CVE-2023-49331?
CVE-2023-49331 affects all versions of Zoho ManageEngine ADAudit Plus prior to version 7271.
5
What component of Zoho ManageEngine ADAudit Plus is vulnerable in CVE-2023-49331?
The vulnerability in CVE-2023-49331 exists in the aggregate reports search option of Zoho ManageEngine ADAudit Plus.