NetSight
IP …
medium4.7

CVE-2024-21791

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option.

Impact

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.

Affected products

VendorProductAffected versions
ZohocorpManageengine Adaudit Plus
before 7.2
Version 7.2

Weakness classification

CWE-89

References