First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2025-3836

HighCVSS 8.3/10Last modified Jun 17, 2026

Description

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

Metrics

CVSS 3.1 8.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
ManageEngine	ADAudit Plus	< 8511

References

https://www.manageengine.com/products/active-directory-audit/cve-2025-3836.htmlVendor Advisory

Timeline

Published: May 22, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-383605.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees [WHY] F CVE-2025-383617.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferencing it [WHAT] hws w CVE-2025-383625.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() CVE-2025-383635.5In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset CVE-2025-383645.5In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() Temporaril CVE-2025-383654.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race CVE-2025-383667.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "num_cpu" from user space The maximu CVE-2025-383677.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is CVE-2025-383685.5In the Linux kernel, the following vulnerability has been resolved: misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() The CVE-2025-383697.8In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq d CVE-2025-38376.1An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installa CVE-2025-383705.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactio