PT-2026-2625 · Manageengine · Admanager Plus

Published 2026-01-13 · Updated 2026-01-13 · CVE-2025-9435

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ManageEngine ADManager Plus versions prior to 7230

Description The software contains a flaw related to Path Traversal within the User Management module. This could potentially allow unauthorized access to system resources.

Recommendations Update ManageEngine ADManager Plus to version 7230 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-9435

Affected Products

Admanager Plus

References · 4

• https://osv.dev/vulnerability/CVE-2025-9435 · Vendor Advisory
• https://manageengine.com/products/ad-manager/admanager-kb/cve-2025-9435.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9435 · Security Note
• https://twitter.com/CVEnew/status/2011075601478898043 · Twitter Post