CVE-2024-48878: SQL Injection
Published Nov 4, 2024
·Updated
Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.
Affected Software
18 affected components
ZohoCorp ManageEngine ADManager Plus<7.2
ZohoCorp ManageEngine ADManager Plus=7.2-7200
ZohoCorp ManageEngine ADManager Plus=7.2-7201
ZohoCorp ManageEngine ADManager Plus=7.2-7202
ZohoCorp ManageEngine ADManager Plus=7.2-7203
ZohoCorp ManageEngine ADManager Plus=7.2-7210
ZohoCorp ManageEngine ADManager Plus=7.2-7211
ZohoCorp ManageEngine ADManager Plus=7.2-7212
ZohoCorp ManageEngine ADManager Plus=7.2-7220
ZohoCorp ManageEngine ADManager Plus=7.2-7221
ZohoCorp ManageEngine ADManager Plus=7.2-7222
ZohoCorp ManageEngine ADManager Plus=7.2-7223
ZohoCorp ManageEngine ADManager Plus=7.2-7224
ZohoCorp ManageEngine ADManager Plus=7.2-7230
ZohoCorp ManageEngine ADManager Plus=7.2-7231
ZohoCorp ManageEngine ADManager Plus=7.2-7232
ZohoCorp ManageEngine ADManager Plus=7.2-7240
ZohoCorp ManageEngine ADManager Plus=7.2-7241
Event History
Nov 4, 2024
CVE Published
via MITRE·10:56 AM
Data Sourced
via MITRE·10:56 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-48878?
CVE-2024-48878 is classified as a high severity vulnerability due to its potential for exploitation via SQL Injection.
2
How do I fix CVE-2024-48878?
To fix CVE-2024-48878, upgrade Zohocorp ManageEngine ADManager Plus to version 7.2-7242 or later.
3
What versions are affected by CVE-2024-48878?
CVE-2024-48878 affects all versions of Zohocorp ManageEngine ADManager Plus up to and including 7.2-7241.
4
What type of vulnerability is CVE-2024-48878?
CVE-2024-48878 is an SQL Injection vulnerability found in the Archived Audit Report module.
5
Is there a workaround for CVE-2024-48878?
It is recommended to apply the latest version update as the primary resolution for CVE-2024-48878, as no official workaround is provided.