VDB

CVE-2025-3834

CVE-2025-3834 PUBLISHED CVSS 8.100000381469727 HIGH

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

EPSS 4.11% · 88.8th percentile

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
4.11%
88.8th percentile

Affected Products

VendorProductVersions
zohocorpmanageengine_adaudit_plus8.5, 0, 8.5
ManageEngineADAudit Plus0

Timeline

  • May 14, 2025 EPSS Score
  • May 14, 2025 Coalition ESS Score
  • May 14, 2025 CVE Published
  • May 14, 2025 PoC Published
  • May 14, 2025 PoC Published
  • May 14, 2025 PoC Published
  • May 14, 2025 CVE Updated
  • May 16, 2025 Coalition ESS Score
  • May 23, 2025 Coalition ESS Score
  • May 25, 2025 EPSS Score
  • May 31, 2025 Coalition ESS Score
  • Jun 6, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›