CVE-2025-41407

—

CVSS 3.1

8.3 high

EPSS

1%p71

Published

May 23, 2025 (May 23, 2025)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

Vendors: zohocorp
Products: manageengine adaudit plus
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.