Rapid7

vulnerability

Zoho ManageEngine ADAudit Plus: CVE-2024-36037: Unauthorized Access

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
Dec 29, 2023
Added
Dec 18, 2024
Modified
Mar 25, 2026

Description

An unauthorized local agent users can view the session recordings. This vulnerability has been fixed and released in ADAudit Plus version 7270.

Solution

zoho-manageengine-adaudit-plus-upgrade-latest
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.