CVE-2025-3833: SQL Injection
Published May 14, 2025
·Updated
Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.
Affected Software
16 affected components
ZohoCorp ManageEngine ADSelfService Plus<6513
ZohoCorp ManageEngine ADSelfService Plus<6.5
ZohoCorp ManageEngine ADSelfService Plus=6.5-6500
ZohoCorp ManageEngine ADSelfService Plus=6.5-6501
ZohoCorp ManageEngine ADSelfService Plus=6.5-6502
ZohoCorp ManageEngine ADSelfService Plus=6.5-6503
ZohoCorp ManageEngine ADSelfService Plus=6.5-6504
ZohoCorp ManageEngine ADSelfService Plus=6.5-6505
ZohoCorp ManageEngine ADSelfService Plus=6.5-6506
ZohoCorp ManageEngine ADSelfService Plus=6.5-6507
ZohoCorp ManageEngine ADSelfService Plus=6.5-6508
ZohoCorp ManageEngine ADSelfService Plus=6.5-6509
ZohoCorp ManageEngine ADSelfService Plus=6.5-6510
ZohoCorp ManageEngine ADSelfService Plus=6.5-6511
ZohoCorp ManageEngine ADSelfService Plus=6.5-6512
ZohoCorp ManageEngine ADSelfService Plus=6.5-6513
Event History
May 14, 2025
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-3833?
CVE-2025-3833 has been rated as a critical vulnerability due to its potential for authenticated SQL injection.
2
How do I fix CVE-2025-3833?
To mitigate CVE-2025-3833, upgrade to ManageEngine ADSelfService Plus version 6514 or later.
3
What versions are affected by CVE-2025-3833?
CVE-2025-3833 affects ManageEngine ADSelfService Plus versions 6513 and earlier.
4
What type of vulnerability is CVE-2025-3833?
CVE-2025-3833 is an authenticated SQL injection vulnerability specifically found in MFA reports.
5
What are the potential impacts of CVE-2025-3833?
Exploitation of CVE-2025-3833 could allow attackers to execute arbitrary SQL queries, potentially compromising sensitive data.