CNNVD-202510-2763 Information

CNNVD ID

CNNVD-202510-2763

CVE-2025-9428

  • CNNVD Published: 2025-10-21

Description (Chinese)

ZOHO ManageEngine Analytics Plus是美国卓豪(ZOHO)公司的一种自助式 IT 分析解决方案。可使用丰富的可视化和仪表板更好地查看您的 IT 数据。 ZOHO ManageEngine Analytics Plus 6171及之前版本存在安全漏洞,该漏洞源于key update api存在SQL注入漏洞。

Description (English)

ZOHO ManageEngine Analytics Plus is a self-help IT analysis solution for ZOHO. You can better view your IT data using a rich visualization and dashboard. ZOHO ManageEngine Analytics Plus 6171 and previous versions have security loopholes, which stem from the SQL-injection gap that keeps update api.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

卓豪

Published

2025-10-21

Last Modified

2026-02-24

References

https://www.manageengine.com/analytics-plus/CVE-2025-9428.html

Patch

https://www.manageengine.com/analytics-plus/service-packs.html

Share on: