Skip to content
OpenAdvisories

Product · Zohocorp

Analytics Plus

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2025-9428 EPSS 29%

    SQL Injection

    Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.

    Zohocorp Analytics Plus
  • High 7.4
    CVE-2025-1724

    Account Takeover

    Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token.

    Zohocorp Analytics Plus