Lucene search

K
nvd0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2023-49331
HistoryMay 20, 2024 - 6:15 p.m.

CVE-2023-49331

2024-05-2018:15:09
CWE-89
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
2
zoho manageengine
adaudit plus
sql injection
vulnerability

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

8.7

Confidence

High

EPSS

0

Percentile

9.0%

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

8.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-49331