Lucene search

K
nvd0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2023-49333
HistoryMay 20, 2024 - 6:15 p.m.

CVE-2023-49333

2024-05-2018:15:09
CWE-89
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
3
zoho adaudit
sql injection
cve-2023-49333

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

8.7

Confidence

High

EPSS

0

Percentile

9.0%

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

8.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-49333