GCVE-110-NCSC-2025-167

Advisory PublishedCVSS 8.1/10

Vulnetix · Advisory published May 14, 2025

Zoho heeft kwetsbaarheden verholpen in ManageEngine ADSelfService Plus (versies 6513 en eerder) en ManageEngine ADAudit Plus (versies 8510 en eerder).

Download JSON Open in Console

Weaknesses (CWE)

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Risk Scores

CVSS 3.1

8.1/10

High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
ManageEngine	vers:6514/<6514	—	—
ManageEngine	vers:6514/<8511	—	—

Aliases

CVE-2025-3833 CVE-2025-3834

References

advisory

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON