CVE-2025-9435

ADManager Plus 빌드 7230 권한 상승 CVE-2025-9435 요구 사항 'Modify user general properties' 역할과 ADManager가 설치된 서버에 대한 로그온 액세스 권한을 가진 기술자 사용자. 설명 기술자 사용자가 서버에 대한 로그온 권한을 가지고 있으면, 높은 권한으로 ADManager를 실행하는 서비스 계정 또는 사용자 계정으로 권한을 상승시킬 수 있습니다. 사용자는 웹 애플리케이션을 통해 임의의 디렉터리를 생성한 다음 DLL 파일을 이 디렉터리에 복사할 수 있습니다...

CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 권한 상승 취약점 설명 Modify Computers는 ADManager에서 컴퓨터를 관리하기 위한 사전 정의된 역할입니다. 기술 사용자가 컴퓨터에 대해 Modify Computers 권한을 가지고 있으면 컴퓨터 개체의 userAccountControl 및 msDS-AllowedToDelegateTo 특성을 변경할 수 있습니다. 이러한 방식으로 기술 사용자는 위임된 조직 구성 단위Organizational Unit 내의 모든 컴퓨터에 대해 제한된...

CVE-2023-29084

CVE-2023-29084 ManageEngine ADManager Plus의 명령 주입 Poc POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2025-9435

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435 Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435

CVE-2025-9435 affects Zohocorp/ManageEngine ADManager Plus: versions below 7230 are vulnerable to a Path Traversal in the User Management module. The connected sources confirm the affected product and issue, with a CVSS v3.1 base score of 5.5 (Network attack vector, Low access complexity, privile...

CVE-2025-9435 Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

PT-2026-2625

CVE-2025-9435 Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module https://t.co/X5Q8U1d7zf...

Zoho ManageEngine ADManager Plus 安全漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...

CVE-2025-9435: Improper Limitation of a Pathname to a Restricted Directory

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2023-29084

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

CVE-2023-31492

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users...

CVE-2021-33911

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services lies in the lack of measures taken at the administrative level to clean up data. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

CVE-2025-11670

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled...

CVE-2025-11670

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled...

CVE-2025-11670

CVE-2025-11670 affects Zohocorp ManageEngine ADManager Plus prior to version 8025. The root cause is NTLM Hash Exposure, and exploitation is restricted to technicians who have the Impersonate as Admin option enabled. Public references consistently cite version 8025 as the fixed/target version. No...