CVE-2024-5586: Zohocorp ManageEngine Adaudit Plus

High severity, CVSS 8.8. EPSS: 5.2% chance of exploitation in the next 30 days.

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

Affected products

• Zohocorp ManageEngine Adaudit Plus: up to and including 8.0; version 8.1 only

Published 2024-08-23. Last modified 2026-06-17.