2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"ADSelfService Plus","vendor":"ManageEngine","versions":[{"lessThan":"6514","status":"affected","version":"0","versionType":"6514"}]}],"source":"0fc0942c-577d-436f-ae8e-945763c79b02"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"39DC8AD8-D6CC-4B7A-AE11-9351D5A3D3C7","versionEndExcluding":"6.5","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6500:*:*:*:*:*:*","matchCriteriaId":"320659C3-0C56-43D5-A29F-64FDC62B91FC","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6501:*:*:*:*:*:*","matchCriteriaId":"A4713150-31DF-46BB-9F91-11DE18ACCA85","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6502:*:*:*:*:*:*","matchCriteriaId":"044111C4-C12B-4389-AEA5-78362C997183","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6503:*:*:*:*:*:*","matchCriteriaId":"F6883E07-C47E-47CA-B013-96A7853E6CDD","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6504:*:*:*:*:*:*","matchCriteriaId":"3B9EEE99-EDF2-4521-947F-D0DC903C4773","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6505:*:*:*:*:*:*","matchCriteriaId":"FFE2422E-71AC-40E6-BFC6-5030A427A3C7","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6506:*:*:*:*:*:*","matchCriteriaId":"2652A735-7EB8-4143-9847-07C35CC7DA05","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6507:*:*:*:*:*:*","matchCriteriaId":"FDA211A5-74C6-4F04-B2A3-F616DF322308","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6508:*:*:*:*:*:*","matchCriteriaId":"7770CE61-3B0D-42E0-952D-660D518CEB12","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6509:*:*:*:*:*:*","matchCriteriaId":"8FC73F1B-75C0-4D0B-94E4-EAE04390E1FD","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6510:*:*:*:*:*:*","matchCriteriaId":"F1096C37-0401-4377-822F-51E16A062FAF","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6511:*:*:*:*:*:*","matchCriteriaId":"70A1BD2E-FC72-4B59-8249-15F1992145C0","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6512:*:*:*:*:*:*","matchCriteriaId":"80520B90-93FC-4843-AEE8-45A32E99B761","vulnerable":true},{"criteria":"cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.5:6513:*:*:*:*:*:*","matchCriteriaId":"16736D98-8484-4498-BE7F-FE328285544A","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports."},{"lang":"es","value":"Las versiones 6513 y anteriores de Zohocorp ManageEngine ADSelfService Plus son vulnerables a la inyección de SQL autenticada en los informes de MFA."}],"id":"CVE-2025-3833","lastModified":"2026-06-17T09:20:46.153","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3833","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-05-14T13:29:40.313688Z","version":"2.0.3"}}]},"published":"2025-05-14T11:16:30.527","references":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":["Vendor Advisory"],"url":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-3833.html"}],"sourceIdentifier":"0fc0942c-577d-436f-ae8e-945763c79b02","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary"}]}
|