« Volver al listado

CVE-2025-9435

Estado: AnalizadaMedia (5.5)—

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zohocorp — Manageengine Admanager Plus

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-9435",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-9435",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-13T14:00:17.705894Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "affectedData": [
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine ADManager Plus",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "7230",
              "versionType": "7230"
            }
          ],
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-01-13T14:16:37.907",
  "references": [
    {
      "url": "https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-9435.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module"
    },
    {
      "lang": "es",
      "value": "Las versiones de Zohocorp ManageEngine ADManager Plus inferiores a 7230 son vulnerables a salto de ruta en el módulo de Gestión de Usuarios"
    }
  ],
  "lastModified": "2026-06-17T10:08:58.337",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7927FC8C-ED61-4E24-AF57-2D5C0E06AB2A",
              "versionEndExcluding": "7.2"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7200:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1AE608DF-E02C-4A63-AD3E-7E3C1B921C3D"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7201:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72C14C6D-5C72-4A39-A8FF-93CD89C831C9"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7202:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D47DA377-0AF4-453E-9605-A5F87FA14E61"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7203:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC919233-CE66-416C-8649-B94A23F131F5"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7210:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD2880B4-88AD-49E4-B423-5C0CCCF5DF4B"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7211:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8BCAFB6-F46D-4E09-8827-13ED1A7D5740"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7212:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D0166A3-B34B-44FC-9DB8-E06BDDAC7CC8"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7220:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE25B1E5-D380-490C-98A6-121FA10A3311"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7221:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50283EE9-A9EC-4BD2-958E-F2A278B84C0B"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7222:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "645C5636-1E03-47D2-834B-3DE95B347E1F"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7223:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4340408B-3928-430F-BDBA-10E43F25C595"
            },
            {
              "criteria": "cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.2:7224:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C792F787-B6F6-4908-923C-25679BA67988"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02"
}