← Back to browse · API

CVE-2025-9428

Severity
HIGH
CVSS
8.3
EPSS
0.25734
Risk score
42.21
CISA KEV
No
PoC
No
Published
2025-10-21
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-35160, GHSA-C9W7-XPPR-936Q
Products
Zohocorp:Analytics Plus 0 ≤6171
Sources
euvd EUVD-2025-35160

Description

Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.

References