CVE-2024-0269: SQL Injection
Published Feb 2, 2024
·Updated
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271.
Affected Software
15 affected components
ZohoCorp ManageEngine ADAudit Plus<7.2
ZohoCorp ManageEngine ADAudit Plus=7.2-7200
ZohoCorp ManageEngine ADAudit Plus=7.2-7201
ZohoCorp ManageEngine ADAudit Plus=7.2-7202
ZohoCorp ManageEngine ADAudit Plus=7.2-7203
ZohoCorp ManageEngine ADAudit Plus=7.2-7210
ZohoCorp ManageEngine ADAudit Plus=7.2-7211
ZohoCorp ManageEngine ADAudit Plus=7.2-7212
ZohoCorp ManageEngine ADAudit Plus=7.2-7213
ZohoCorp ManageEngine ADAudit Plus=7.2-7215
ZohoCorp ManageEngine ADAudit Plus=7.2-7220
ZohoCorp ManageEngine ADAudit Plus=7.2-7250
ZohoCorp ManageEngine ADAudit Plus=7.2-7251
ZohoCorp ManageEngine ADAudit Plus=7.2-7260
ZohoCorp ManageEngine ADAudit Plus=7.2-7270
Event History
Feb 2, 2024
CVE Published
via MITRE·01:05 PM
Data Sourced
via MITRE·01:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0269?
CVE-2024-0269 has not been assigned a CVSS score, but it is considered a significant vulnerability due to the potential for authenticated SQL injection.
2
How do I fix CVE-2024-0269?
To fix CVE-2024-0269, upgrade ManageEngine ADAudit Plus to version 7271 or higher.
3
What versions of ManageEngine ADAudit Plus are affected by CVE-2024-0269?
CVE-2024-0269 affects ManageEngine ADAudit Plus versions 7270 and below.
4
What type of vulnerability is CVE-2024-0269?
CVE-2024-0269 is classified as an authenticated SQL injection vulnerability.
5
Is there a patch available for CVE-2024-0269?
Yes, a patch for CVE-2024-0269 is available in version 7271 of ManageEngine ADAudit Plus.