{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-18T03:19:00.646","vulnerabilities":[{"cve":{"id":"CVE-2025-3833","sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","published":"2025-05-14T11:16:30.527","lastModified":"2025-09-30T15:05:27.270","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports."},{"lang":"es","value":"Las versiones 6513 y anteriores de Zohocorp ManageEngine ADSelfService Plus son vulnerables a la inyección de SQL autenticada en los informes de MFA."}],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}]},"weaknesses":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5","matchCriteriaId":"39DC8AD8-D6CC-4B7A-AE11-9351D5A3D3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6500:*:*:*:*:*:*","matchCriteriaId":"320659C3-0C56-43D5-A29F-64FDC62B91FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6501:*:*:*:*:*:*","matchCriteriaId":"A4713150-31DF-46BB-9F91-11DE18ACCA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6502:*:*:*:*:*:*","matchCriteriaId":"044111C4-C12B-4389-AEA5-78362C997183"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6503:*:*:*:*:*:*","matchCriteriaId":"F6883E07-C47E-47CA-B013-96A7853E6CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6504:*:*:*:*:*:*","matchCriteriaId":"3B9EEE99-EDF2-4521-947F-D0DC903C4773"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6505:*:*:*:*:*:*","matchCriteriaId":"FFE2422E-71AC-40E6-BFC6-5030A427A3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6506:*:*:*:*:*:*","matchCriteriaId":"2652A735-7EB8-4143-9847-07C35CC7DA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6507:*:*:*:*:*:*","matchCriteriaId":"FDA211A5-74C6-4F04-B2A3-F616DF322308"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6508:*:*:*:*:*:*","matchCriteriaId":"7770CE61-3B0D-42E0-952D-660D518CEB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6509:*:*:*:*:*:*","matchCriteriaId":"8FC73F1B-75C0-4D0B-94E4-EAE04390E1FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6510:*:*:*:*:*:*","matchCriteriaId":"F1096C37-0401-4377-822F-51E16A062FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6511:*:*:*:*:*:*","matchCriteriaId":"70A1BD2E-FC72-4B59-8249-15F1992145C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6512:*:*:*:*:*:*","matchCriteriaId":"80520B90-93FC-4843-AEE8-45A32E99B761"},{"vulnerable":true,"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6513:*:*:*:*:*:*","matchCriteriaId":"16736D98-8484-4498-BE7F-FE328285544A"}]}]}],"references":[{"url":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-3833.html","source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"]}]}}]}