CVE-2025-8324

CriticalCVSS 9.8/10Last modified Oct 18, 2026

Description

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Zohocorp	ManageEngine Analytics Plus	< 6171

References

https://www.manageengine.com/analytics-plus/CVE-2025-8324.html

Timeline

Published: Nov 11, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-83258.8The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can in CVE-2025-83269.8A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file CVE-2025-83279.8A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown fun CVE-2025-83289.8A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some CVE-2025-83299.8A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the fi CVE-2025-83309.8A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code o CVE-2025-83319.8A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of CVE-2025-83329.8A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of th CVE-2025-83339.8A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an un CVE-2025-83349.8A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is so CVE-2025-83354.3A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The ma CVE-2025-83369.8A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown c