CVE-2025-41403
8.3 highEPSS 1.8%
High (8.3) in zohocorp manageengine adaudit plus. EPSS 1.8% chance of exploitation in the next 30 days.
Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.
Severity
CVSS 3.1
8.3 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zohocorp:manageengine_adaudit_plus
References
Check your stackJSON