Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:8.5:8500:*:*:*:*:*:*

part: a version: 8.5 update: 8500

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Adaudit Plus (3794d677-c3f5-5c1b-ba18-a97145cbdafa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41444 vulnerable 2026-06-03 15:01:14.901197 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.
Published: 2025-06-09T11:14:58.186Z
Updated: 2025-06-09T13:05:30.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41407 vulnerable 2026-06-03 15:01:14.819483 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.
Published: 2025-05-23T10:29:58.652Z
Updated: 2025-05-23T11:57:14.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41403 vulnerable 2026-06-03 15:01:14.814253 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.
Published: 2025-05-22T10:39:59.813Z
Updated: 2025-05-22T18:13:43.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3836 vulnerable 2026-06-03 15:01:05.754330 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.
Published: 2025-05-22T10:38:26.473Z
Updated: 2025-05-22T18:21:44.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3834 vulnerable 2026-06-03 15:01:05.734163 SQL Injection
HIGH (8.1)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.
Published: 2025-05-14T11:05:34.690Z
Updated: 2025-05-14T13:28:48.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36528 vulnerable 2026-06-03 15:00:53.560941 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.
Published: 2025-06-09T11:12:14.531Z
Updated: 2025-06-09T13:05:48.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36527 vulnerable 2026-06-03 15:00:53.559649 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.
Published: 2025-05-23T10:28:24.153Z
Updated: 2025-05-23T12:05:28.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27709 vulnerable 2026-06-03 15:00:13.054166 SQL Injection
HIGH (8.3)
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.
Published: 2025-06-09T11:04:38.114Z
Updated: 2025-06-09T15:39:11.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.