Analytics Plus (Zohocorp) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-10-21. Vendor: Zohocorp.

CVEs of Analytics Plus

• CVE-2025-9428 - CVSS 8.8 (high), 2025-10-21: Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.
• CVE-2025-1724 - CVSS 7.4 (high), 2025-03-17: Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a…