VULNERABILITY INTELLIGENCE

CVE-2025-1723

CVSS score8.1 HIGH
EPSS probability1.47%
CISA KEVNot currently listed
Published2025-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.

Weakness classification

  • 0fc0942c-577d-436f-ae8e-945763c79b02: CWE-287

Primary references