Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-1724

Account Takeover

Description

Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp Analytics Plus

Default version status: unaffected

  • 0 to < 6130affected

References