CNNVD-202511-1195 Information
Nov 11, 2025
cve
CNNVD ID
CNNVD-202511-1195
Related CVE
- CNNVD Published: 2025-11-11
Description (Chinese)
ZOHO ManageEngine Analytics Plus是美国卓豪(ZOHO)公司的一种自助式 IT 分析解决方案。可使用丰富的可视化和仪表板更好地查看您的 IT 数据。 ZOHO ManageEngine Analytics Plus 6170及之前版本存在安全漏洞,该漏洞源于过滤器配置不当,可能导致SQL注入攻击。
Description (English)
ZOHO ManageEngine Analytics Plus is a self-help IT analysis solution for ZOHO. You can better view your IT data using a rich visualization and dashboard. ZOHO ManageEngine Analytics Plus 6170 and previous versions had a security loophole, which stemmed from the inappropriate configuration of the filter, which could lead to an SQL injection attack.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
卓豪
Published
2025-11-11
Last Modified
2026-02-24
References
https://www.manageengine.com/analytics-plus/CVE-2025-8324.html
Patch
https://www.manageengine.com/analytics-plus/CVE-2025-8324.html
Share on: