PT-2025-22456
CVE-2025-3836
·
Published
2025-05-09
·
Updated
2025-06-16
Description by
CVSS 2.0
8.7
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:P
Name of the Vulnerable Software and Affected Versions
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior
Description
The issue concerns an authenticated SQL injection in the logon events aggregate report.
Recommendations
For Zohocorp ManageEngine ADAudit Plus versions 8510 and prior, update to a version later than 8510 to resolve the issue.
As a temporary workaround, consider restricting access to the logon events aggregate report until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾