CVE 9.8 CRITICAL

SQL Injection_CVE-2025-8324

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.

AI Analysis

Unauthenticated SQL Injection vulnerability due to improper filter configuration

Basic Information

ID CVE-2025-8324
Source Zohocorp
Published Nov 11, 2025 at 13:04
Modified Nov 11, 2025 at 13:05

Affected Product

Vendor Zohocorp
Product ManageEngine Analytics Plus
Affected Versions Zohocorp ManageEngine Analytics Plus 0

CWE Classification

AI Assessment

AI Score 9.8 / 10
AI Severity Critical
Vendor Zohocorp
Product ManageEngine Analytics Plus
Version 6170 and below

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.