Direct Inward Dialing: +1 408 916 9393
| Vulnerability Details | |
| Severity | High |
| CVE ID | CVE-2024-48878 |
| Affected software version | 7241 and older |
| Fixed version | 7250 |
| Fixed on | October 4, 2024 |
The CVE-2024-48878 refers to a SQL injection vulnerability in the Archived Audit Report of ADManager Plus versions 7241 or older. This issue has been fixed in build 7250, and the release notes can be found here.
This vulnerability could allow an authenticated adversary to execute custom queries and gain unauthorized access to database table entries through the vulnerable request.
Update your ADManager Plus instance to its latest build by installing the service pack.
This vulnerability was reported by an internal user.
Select a language to translate the contents of this web page:
Fill this form, and we'll contact you rightaway.
Our technical support team will get in touch with you at the earliest."
