CVE-2025-9435

ADManager Plus Build 7230 権限昇格 CVE-2025-9435 要件 'Modify user general properties'ロールを持ち、ADManagerがインストールされているサーバーへのログオンアクセス権を持つテクニシャンユーザー。 説明...

CVE-2023-38743

CVE-2023-38743 ManageEngine ADManager コマンドインジェクション 参照: https://medium.com/@petrusviet/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe https://www.zerodayinitiative.com/advisories/ZDI-23-1488/...

CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 特権昇格の脆弱性 説明 Modify Computers は、ADManager でコンピュータを管理するための定義済みロールです。テクニシャン ユーザーがコンピュータに対して Modify Computers 権限を持っている場合、そのコンピュータ オブジェクトの userAccountControl 属性と msDS-AllowedToDelegateTo 属性を変更できます。これにより、テクニシャン ユーザーは、委任された組織単位内の任意のコンピュータに対して制約付き Kerberos 委任...

CVE-2023-29084

CVE-2023-29084 ManageEngine ADManager Plus におけるコマンドインジェクション Poc POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2025-9435

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435 Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

CVE-2025-9435

CVE-2025-9435 affects Zohocorp/ManageEngine ADManager Plus: versions below 7230 are vulnerable to a Path Traversal in the User Management module. The connected sources confirm the affected product and issue, with a CVSS v3.1 base score of 5.5 (Network attack vector, Low access complexity, privile...

CVE-2025-9435 Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

PT-2026-2625

CVE-2025-9435 Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module https://t.co/X5Q8U1d7zf...

CVE-2025-9435: Improper Limitation of a Pathname to a Restricted Directory

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

Zoho ManageEngine ADManager Plus 安全漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...

CVE-2023-29084

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...

CVE-2023-31492

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users...

CVE-2021-33911

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2022-42904

Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services lies in the lack of measures taken at the administrative level to clean up data. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

CVE-2025-11670

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled...

CVE-2025-11670

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled...