Lucene search

K
nvd0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2023-49332
HistoryMay 20, 2024 - 6:15 p.m.

CVE-2023-49332

2024-05-2018:15:09
CWE-89
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
4
zoho manageengine
adaudit plus
sql injection
file share.

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

8.8

Confidence

High

EPSS

0

Percentile

9.0%

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

8.8

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-49332