PT-2025-22647
CVE-2025-36527
·
Publicado
2025-05-23
·
Atualizado
2025-06-16
Descrição por
CVSS 3.1
8.3
AltaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions
Zohocorp ManageEngine ADAudit Plus versions below 8511
Description
The issue is related to SQL injection while exporting reports.
Recommendations
For versions below 8511, update to version 8511 or later to resolve the issue.
As a temporary workaround, consider restricting report export functionality until a patch is available.
Avoid using sensitive data in report exports to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾