VULNERABILITY INTELLIGENCE

CVE-2025-10020

CVSS score8.5 HIGH
EPSS probability4.54%
CISA KEVNot currently listed
Published2025-10-21
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.

Weakness classification

  • 0fc0942c-577d-436f-ae8e-945763c79b02: CWE-77

Primary references