MA
Product
Manageengine Analytics Plus
On CISA KEVExploited in the wildRansomware-linked
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Manageengine Analytics Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9428 | 8.8 | Oct 21 | Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api Affected: before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +4 more |
| CVE-2024-52323 | 8.1 | Nov 27 | Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to… Affected: before 6.1 |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 1.0 |
| CVE-2020-21641 | 7.5 | Aug 15 | Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and… Affected: before 4.3.5 |
Showing 4