CVE-2025-1723

High CVSS: 8.1

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.

Vendor

Zohocorp

Product

Manageengine Adselfservice Plus

CWE

CWE-287

Yayın Tarihi

2025-03-03 08:15:15

Güncelleme

2025-09-30 15:01:26

Source Identifier

0fc0942c-577d-436f-ae8e-945763c79b02

KEV Date Added

Kategoriler

CWE-287 Manageengine Adselfservice Plus HIGH Zohocorp 2025

Referanslar

https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html

Benzer Kayıtlar

High

CVE-2026-27655

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on M…

High

CVE-2026-4107

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count a…

High

CVE-2026-4108

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Perm…

High

CVE-2026-3879

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Deta…

High

CVE-2026-3880

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client P…

High

CVE-2026-28703

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Betwee…