https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-41444.htmlhttps://patchthecve.com/cve/CVE-2025-41444.htmlWed, 17 Jun 2026 09:22:52 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.https://patchthecve.com/cve/CVE-2025-36528.htmlhttps://patchthecve.com/cve/CVE-2025-36528.htmlWed, 17 Jun 2026 09:14:46 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.https://patchthecve.com/cve/CVE-2025-27709.htmlhttps://patchthecve.com/cve/CVE-2025-27709.htmlWed, 17 Jun 2026 09:04:05 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.https://patchthecve.com/cve/CVE-2025-41407.htmlhttps://patchthecve.com/cve/CVE-2025-41407.htmlWed, 17 Jun 2026 09:22:49 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.https://patchthecve.com/cve/CVE-2025-36527.htmlhttps://patchthecve.com/cve/CVE-2025-36527.htmlWed, 17 Jun 2026 09:14:46 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.https://patchthecve.com/cve/CVE-2025-41403.htmlhttps://patchthecve.com/cve/CVE-2025-41403.htmlWed, 17 Jun 2026 09:22:49 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.https://patchthecve.com/cve/CVE-2025-3836.htmlhttps://patchthecve.com/cve/CVE-2025-3836.htmlWed, 17 Jun 2026 09:20:46 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.https://patchthecve.com/cve/CVE-2025-3834.htmlhttps://patchthecve.com/cve/CVE-2025-3834.htmlWed, 17 Jun 2026 09:20:46 +0000HIGH 8.1: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.https://patchthecve.com/cve/CVE-2024-49574.htmlhttps://patchthecve.com/cve/CVE-2024-49574.htmlWed, 17 Jun 2026 08:00:00 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.https://patchthecve.com/cve/CVE-2024-36485.htmlhttps://patchthecve.com/cve/CVE-2024-36485.htmlWed, 17 Jun 2026 07:36:49 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.https://patchthecve.com/cve/CVE-2024-5608.htmlhttps://patchthecve.com/cve/CVE-2024-5608.htmlWed, 17 Jun 2026 08:16:17 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.https://patchthecve.com/cve/CVE-2024-5527.htmlhttps://patchthecve.com/cve/CVE-2024-5527.htmlWed, 17 Jun 2026 08:16:07 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.https://patchthecve.com/cve/CVE-2024-5487.htmlhttps://patchthecve.com/cve/CVE-2024-5487.htmlWed, 17 Jun 2026 08:16:02 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.https://patchthecve.com/cve/CVE-2024-36518.htmlhttps://patchthecve.com/cve/CVE-2024-36518.htmlWed, 17 Jun 2026 07:36:53 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard.https://patchthecve.com/cve/CVE-2024-36035.htmlhttps://patchthecve.com/cve/CVE-2024-36035.htmlWed, 17 Jun 2026 07:36:00 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.https://patchthecve.com/cve/CVE-2024-36034.htmlhttps://patchthecve.com/cve/CVE-2024-36034.htmlWed, 17 Jun 2026 07:36:00 +0000HIGH 8.3: Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.https://patchthecve.com/cve/CVE-2024-36037.htmlhttps://patchthecve.com/cve/CVE-2024-36037.htmlWed, 17 Jun 2026 07:36:00 +0000MEDIUM 5.5: Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.https://patchthecve.com/cve/CVE-2024-36036.htmlhttps://patchthecve.com/cve/CVE-2024-36036.htmlWed, 17 Jun 2026 07:36:00 +0000MEDIUM 4.2: Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.https://patchthecve.com/cve/CVE-2024-21791.htmlhttps://patchthecve.com/cve/CVE-2024-21791.htmlWed, 17 Jun 2026 07:10:10 +0000MEDIUM 4.7: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.https://patchthecve.com/cve/CVE-2023-49335.htmlhttps://patchthecve.com/cve/CVE-2023-49335.htmlWed, 17 Jun 2026 06:35:50 +0000HIGH 8.3: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.https://patchthecve.com/cve/CVE-2023-49334.htmlhttps://patchthecve.com/cve/CVE-2023-49334.htmlWed, 17 Jun 2026 06:35:50 +0000HIGH 8.3: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.https://patchthecve.com/cve/CVE-2023-49333.htmlhttps://patchthecve.com/cve/CVE-2023-49333.htmlWed, 17 Jun 2026 06:35:49 +0000HIGH 8.3: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.https://patchthecve.com/cve/CVE-2023-49332.htmlhttps://patchthecve.com/cve/CVE-2023-49332.htmlWed, 17 Jun 2026 06:35:49 +0000HIGH 8.3: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.https://patchthecve.com/cve/CVE-2023-49331.htmlhttps://patchthecve.com/cve/CVE-2023-49331.htmlWed, 17 Jun 2026 06:35:49 +0000HIGH 8.3: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.https://patchthecve.com/cve/CVE-2023-49330.htmlhttps://patchthecve.com/cve/CVE-2023-49330.htmlWed, 17 Jun 2026 06:35:49 +0000HIGH 8.3: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.