8.1High
CVE-2025-3834SQL Injection
Description
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.
Weakness (CWE):
CWE-89
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| ManageEngine | ADAudit Plus | < 8511 | |
| zohocorp | manageengine adaudit plus | < 8.5 |
References and patches
CPE matches (NVD) (4)
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*< 8.5cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:-:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:8500:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:8510:*:*:*:*:*:*