CVE-2025-36527CWE-89

SQL Injection

High · published May 23, 2025

CVSS v3.1

8.3

EPSS

38%

Percentile

98.6

In the wild

Unconfirmed

What it is

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

The record

Technical detail

CVSS v3.1: 8.3 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0: Not supplied
EPSS: 0.38281 · 98.6th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2025-05-23T10:28Z

EPSS history

Timeline