PT-2026-2625 · Manageengine · Admanager Plus

CVE-2025-9435 · Publicado 2026-01-13 · Atualizado 2026-01-13

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ManageEngine ADManager Plus versions prior to 7230

Description The software contains a flaw related to Path Traversal within the User Management module. This could potentially allow unauthorized access to system resources.

Recommendations Update ManageEngine ADManager Plus to version 7230 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-9435

Produtos afetados

Admanager Plus

Referências · 4

• https://osv.dev/vulnerability/CVE-2025-9435 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011075601478898043 · Publicação no Twitter
• https://manageengine.com/products/ad-manager/admanager-kb/cve-2025-9435.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-9435 · Nota de Segurança