CVE-2024-0253: SQL Injection
Published Feb 2, 2024
·Updated
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data.
Affected Software
15 affected components
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
ZohoCorp ManageEngine ADAudit Plus=7.2-7270
Event History
Feb 2, 2024
CVE Published
via MITRE·12:50 PM
Data Sourced
via MITRE·12:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0253?
CVE-2024-0253 is classified as a high severity vulnerability due to the risk of authenticated SQL injection.
2
How does CVE-2024-0253 affect ManageEngine ADAudit Plus?
CVE-2024-0253 allows attackers with valid authentication to exploit SQL injection vulnerabilities, potentially leading to unauthorized access to sensitive data.
3
How do I fix CVE-2024-0253?
To address CVE-2024-0253, upgrade ManageEngine ADAudit Plus to version 7271 or later, which includes the necessary security patches.
4
What versions of ManageEngine ADAudit Plus are affected by CVE-2024-0253?
CVE-2024-0253 affects ManageEngine ADAudit Plus versions 7270 and earlier.
5
Is there a workaround for CVE-2024-0253?
Currently, the recommended resolution for CVE-2024-0253 is to upgrade to the patched version, as no specific workaround is provided.