IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.1Yüksek

CVE-2025-8309User privilege escalation vulnerability

ManageEngine Asset Explorer; ManageEngine ServiceDesk Plus; ManageEngine ServiceDesk Plus MSP; ManageEngine SupportCenter Plus Yayım: (1 yıl önce)

Açıklama

There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp. This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.

Zayıflık türü (CWE): CWE-269

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
ManageEngine Asset Explorer < 7710
ManageEngine ServiceDesk Plus < 15110
ManageEngine ServiceDesk Plus MSP < 14940
ManageEngine SupportCenter Plus < 14940

Kaynaklar ve yamalar