CVE-2025-41444

HIGH

Zohocorp Manageengine Adaudit Plus < 8.5 - SQL Injection

Title source: rule

Description

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

References (1)

Scores

CVSS v3 8.3
EPSS 0.0072
EPSS Percentile 72.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Classification

CWE
CWE-89
Status published

Affected Products (4)

zohocorp/manageengine_adaudit_plus < 8.5
zohocorp/manageengine_adaudit_plus
zohocorp/manageengine_adaudit_plus
zohocorp/manageengine_adaudit_plus

Timeline

Published Jun 09, 2025
Tracked Since Feb 18, 2026