How many CVEs does zohocorp manageengine analytics plus have?

zohocorp manageengine analytics plus has 8 published CVE records since 2019.

How many zohocorp manageengine analytics plus CVEs are in CISA KEV?

Yes — 1 of zohocorp manageengine analytics plus's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for zohocorp manageengine analytics plus vulnerabilities?

Yes — 1 of zohocorp manageengine analytics plus's CVEs have a known public exploit.

Which versions of zohocorp manageengine analytics plus are affected?

28 distinct zohocorp manageengine analytics plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zohocorp manageengine analytics plus CVEs?

zohocorp manageengine analytics plus's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-20 (Improper Input Validation).

What is the average severity of zohocorp manageengine analytics plus CVEs?

The average CVSS base score across zohocorp manageengine analytics plus's scored CVEs is 8.3.

zohocorp manageengine analytics plus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every zohocorp manageengine analytics plus version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 6.12 CVEs
< 4.3.51 CVE
< 5.11 CVE
< 5.31 CVE
< 61711 CVE
1.0 <= v <= 1.01 CVE
2.9 <= v <= 2.91 CVE
3.0 <= v <= 3.01 CVE
3.1 <= v <= 3.11 CVE
3.2 <= v <= 3.21 CVE
3.3 <= v <= 3.31 CVE
3.4 <= v <= 3.41 CVE
3.5 <= v <= 3.51 CVE
3.6 <= v <= 3.61 CVE
3.7 <= v <= 3.71 CVE
3.8 <= v <= 3.81 CVE
3.9 <= v <= 3.91 CVE
4.0 <= v <= 4.01 CVE
4.1 <= v <= 4.11 CVE
4.2 <= v <= 4.21 CVE
4.3 <= v <= 4.31 CVE
5.1 <= v <= 5.11 CVE
6.1 <= v <= 6.11 CVE

Fixed in

6.12 CVEs
4.3.51 CVE
5.11 CVE
5.31 CVE
61711 CVE

Find a version

8 CVEs

Sort

SQL Injection
CVE-2025-8324
Patch
CWE-89
Critical · CVSS 9.8
EPSS 1.7% (75th pct)2025-11-11
SQL Injection
CVE-2025-9428
Patch
CWE-89
High · CVSS 8.8
EPSS 25.7% (98th pct)2025-10-21
Sensitive Data Exposure
CVE-2024-52323
Patch
CWE-200
High · CVSS 8.1
EPSS 1.1% (63th pct)2024-11-27
Medium vulnerability · 2023-11-15
CVE-2023-6105
Patch
CWE-200
Medium · CVSS 5.5
EPSS 0.7% (49th pct)2023-11-15
Critical vulnerability · 2023-01-18
CVE-2022-47966
CISA KEV
Public exploit
Patch
CWE-20
Added to CISA KEV 2023-01-23
Critical · CVSS 9.3
EPSS 99.8% (100th pct)2023-01-18
Critical vulnerability · 2022-08-15
CVE-2020-21642
Critical · CVSS 9.8
EPSS 7.9% (94th pct)2022-08-15
High vulnerability · 2022-08-15
CVE-2020-21641
Patch
High · CVSS 7.5
EPSS 4.5% (90th pct)2022-08-15
High vulnerability · 2019-06-18
CVE-2019-12133
High · CVSS 7.8
EPSS 1.8% (76th pct)2019-06-18

zohocorp manageengine analytics plus Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other zohocorp products

Frequently asked questions

References

Track zohocorp manageengine analytics plus vulnerabilities