CVE-2025-3833CWE-89

SQL Injection

High · published May 14, 2025

Patch now

High probability of exploitation

CVSS calls it high at 8.1. It sits in the 98.9th percentile for exploit probability.

CVSS v3.1

8.1

EPSS

51%

Percentile

98.9

In the wild

Unconfirmed

What it is

Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.50525 · 98.9th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2025-05-14T11:00Z

EPSS history

Timeline