CVE-2025-9428

High · 8.8

CVSS

8.8

EPSS

27.4%

Published

Oct 21, 2025

CISA due date

—

The record

Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.

Ecosystem	Package	Introduced	Fixed