CNNVD-202511-1195 Information

CNNVD ID

CNNVD-202511-1195

CVE-2025-8324

  • CNNVD Published: 2025-11-11

Description (Chinese)

ZOHO ManageEngine Analytics Plus是美国卓豪(ZOHO)公司的一种自助式 IT 分析解决方案。可使用丰富的可视化和仪表板更好地查看您的 IT 数据。 ZOHO ManageEngine Analytics Plus 6170及之前版本存在安全漏洞,该漏洞源于过滤器配置不当,可能导致SQL注入攻击。

Description (English)

ZOHO ManageEngine Analytics Plus is a self-help IT analysis solution for ZOHO. You can better view your IT data using a rich visualization and dashboard. ZOHO ManageEngine Analytics Plus 6170 and previous versions had a security loophole, which stemmed from the inappropriate configuration of the filter, which could lead to an SQL injection attack.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

卓豪

Published

2025-11-11

Last Modified

2026-02-24

References

https://www.manageengine.com/analytics-plus/CVE-2025-8324.html

Patch

https://www.manageengine.com/analytics-plus/CVE-2025-8324.html

Share on: