8.1High

CVE-2025-3834SQL Injection

ManageEngine ADAudit Plus Published: (1 year ago)

Description

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

Weakness (CWE): CWE-89

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
ManageEngine ADAudit Plus < 8511
zohocorp manageengine adaudit plus < 8.5

References and patches

CPE matches (NVD) (4)

  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:* < 8.5
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:-:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:8500:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:8510:*:*:*:*:*:*