CVE-2025-8324: Zohocorp ManageEngine Analytics Plus

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.

Affected products

• Zohocorp ManageEngine Analytics Plus: before 6171 (fixed in 6171)

Published 2025-11-11. Last modified 2026-06-17.