CVEDB API

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.9%

CVSS Severity

CVSS v3 Score 8.3

References

Products affected by CVE-2023-49331

Zohocorp » Manageengine Adaudit Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:-
Zohocorp » Manageengine Adaudit Plus » Version: 4.1.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.1.0
Zohocorp » Manageengine Adaudit Plus » Version: 4.5.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.5.0
Zohocorp » Manageengine Adaudit Plus » Version: 5.0.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.0.0
Zohocorp » Manageengine Adaudit Plus » Version: 5.1

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.1
Zohocorp » Manageengine Adaudit Plus » Version: 6.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0
Zohocorp » Manageengine Adaudit Plus » Version: 6.0.1

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0.1
Zohocorp » Manageengine Adaudit Plus » Version: 7.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0
Zohocorp » Manageengine Adaudit Plus » Version: 7.0.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0.0
Zohocorp » Manageengine Adaudit Plus » Version: 7.1.1

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.1.1
Zohocorp » Manageengine Adaudit Plus » Version: 7.2

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.2