8.1High
CVE-2025-8309User privilege escalation vulnerability
Description
There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp. This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.
Weakness (CWE):
CWE-269
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| ManageEngine | Asset Explorer | < 7710 | |
| ManageEngine | ServiceDesk Plus | < 15110 | |
| ManageEngine | ServiceDesk Plus MSP | < 14940 | |
| ManageEngine | SupportCenter Plus | < 14940 |