PT-2025-22647
CVE-2025-36527
·
Published
2025-05-23
·
Updated
2025-06-16
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions
Zohocorp ManageEngine ADAudit Plus versions below 8511
Description
The issue is related to SQL injection while exporting reports.
Recommendations
For versions below 8511, update to version 8511 or later to resolve the issue.
As a temporary workaround, consider restricting report export functionality until a patch is available.
Avoid using sensitive data in report exports to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾