CVE-2023-49333: SQL Injection
Published May 20, 2024
·Updated
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.
Affected Software
16 affected components
Zoho ManageEngine ADAudit Plus<7271
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
ZohoCorp ManageEngine ADAudit Plus=7.2-7270
Event History
May 20, 2024
CVE Published
via MITRE·05:51 PM
Data Sourced
via MITRE·05:51 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-49333?
The severity of CVE-2023-49333 is considered high due to its potential for exploitation via SQL injection.
2
How do I fix CVE-2023-49333?
To fix CVE-2023-49333, upgrade Zoho ManageEngine ADAudit Plus to version 7271 or later.
3
Which versions of Zoho ManageEngine ADAudit Plus are affected by CVE-2023-49333?
CVE-2023-49333 affects all versions of Zoho ManageEngine ADAudit Plus below 7271.
4
What type of vulnerability is CVE-2023-49333?
CVE-2023-49333 is a SQL injection vulnerability found in the dashboard graph feature.
5
Is CVE-2023-49333 publicly known and can it be exploited?
Yes, CVE-2023-49333 is publicly known and can be exploited if systems remain unpatched.