Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2541▼ 407 respecto a la semana anterior
Críticas / altas1311▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)59▼ 467 respecto a la semana anterior
55 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Crítica (10) | 4.7% | — | Zohocorp Manageengine Adaudit PlusAI | 23/7/2026 | 24/7/2026 | Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API. | |
| Pendiente de análisis | Crítica (9) | 2.5% | — | Manageengine Adselfservice PlusAIManageengine Recoverymanager PlusAIManageengine M365 Manager PlusAIManageengine Adaudit PlusAI | 23/6/2026 | 24/6/2026 | In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover. | |
| Analizada | Alta (8.3) | 1.6% | — | Zohocorp Manageengine Adaudit Plus | 9/6/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module. | |
| Analizada | Alta (8.3) | 1.6% | — | Zohocorp Manageengine Adaudit Plus | 9/6/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports. | |
| Analizada | Alta (8.3) | 1.6% | — | Zohocorp Manageengine Adaudit Plus | 9/6/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports. | |
| Analizada | Alta (8.3) | 1.5% | — | Zohocorp Manageengine Adaudit Plus | 23/5/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report. | |
| Analizada | Alta (8.3) | 37% | — | Zohocorp Manageengine Adaudit Plus | 23/5/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. | |
| Analizada | Alta (8.3) | 1.7% | — | Zohocorp Manageengine Adaudit Plus | 22/5/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data. | |
| Analizada | Alta (8.3) | 5.9% | — | Zohocorp Manageengine Adaudit Plus | 22/5/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report. | |
| Analizada | Alta (8.1) | 1.7% | — | Zohocorp Manageengine Adaudit Plus | 14/5/2025 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report. | |
| Analizada | Alta (8.8) | 3.6% | — | Zohocorp Manageengine Adaudit Plus | 18/11/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module. | |
| Modificada | Alta (8.8) | 3.2% | — | Zohocorp Manageengine Adaudit Plus | 4/11/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option. | |
| Analizada | Alta (8.1) | 2.5% | — | Zohocorp Manageengine Adaudit Plus | 24/10/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature. | |
| Analizada | Alta (8.8) | 5.2% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option. | |
| Analizada | Alta (8.8) | 4.5% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module. | |
| Analizada | Alta (8.8) | 4.0% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option. | |
| Analizada | Alta (8.8) | 4.5% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report. | |
| Analizada | Alta (8.8) | 5.3% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module. | |
| Analizada | Alta (8.8) | 4.4% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard. | |
| Analizada | Alta (8.8) | 4.5% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard. | |
| Analizada | Alta (8.8) | 4.0% | — | Zohocorp Manageengine Adaudit Plus | 23/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option. | |
| Analizada | Alta (8.8) | 4.7% | — | Zohocorp Manageengine Adaudit Plus | 12/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration. | |
| Analizada | Alta (8.8) | 4.7% | — | Zohocorp Manageengine Adaudit Plus | 12/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option. | |
| Analizada | Media (5.4) | 3.1% | — | Zohocorp Manageengine Adaudit Plus | 12/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's dashboard. | |
| Analizada | Alta (8.8) | 7.4% | — | Zohocorp Manageengine Adaudit Plus | 12/8/2024 | 17/6/2026 | Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording. |