9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.
AI Analysis
Unauthenticated SQL Injection vulnerability due to improper filter configuration
Basic Information
ID
CVE-2025-8324
Source
Zohocorp
Published
Nov 11, 2025 at 13:04
Modified
Nov 11, 2025 at 13:05
Affected Product
Vendor
Zohocorp
Product
ManageEngine Analytics Plus
Affected Versions
Zohocorp ManageEngine Analytics Plus 0
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
Zohocorp
Product
ManageEngine Analytics Plus
Version
6170 and below