Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:8500:*:*:*:*:*:*

part: a version: 8.5 update: 8500

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Adaudit Plus (3794d677-c3f5-5c1b-ba18-a97145cbdafa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41444 vulnerable 2026-06-08 07:25:07.070532 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.
Published: 2025-06-09T11:14:58.186Z
Updated: 2025-06-09T13:05:30.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41407 vulnerable 2026-06-08 07:25:06.996406 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
Published: 2025-05-23T10:29:58.652Z
Updated: 2025-05-23T11:57:14.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41403 vulnerable 2026-06-08 07:25:06.992907 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.
Published: 2025-05-22T10:39:59.813Z
Updated: 2025-05-22T18:13:43.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3836 vulnerable 2026-06-08 07:23:10.006035 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.
Published: 2025-05-22T10:38:26.473Z
Updated: 2025-05-22T18:21:44.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3834 vulnerable 2026-06-08 07:23:09.980255 SQL Injection
HIGH (8.1)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.
Published: 2025-05-14T11:05:34.690Z
Updated: 2025-05-14T13:28:48.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36528 vulnerable 2026-06-08 07:21:01.848430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36527 vulnerable 2026-06-08 07:21:01.846870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27709 vulnerable 2026-06-08 07:14:55.464760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.