CVE-2025-8309
Published: Aug 20, 2025
Modified: Feb 26, 2026
CVSS v3.1
8.1
Description
There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp. This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.
| Vendor | Product | Versions |
|---|---|---|
ManageEngine | Asset Explorer | affected 0 - < 7710 |
ManageEngine | ServiceDesk Plus | affected 0 - < 15110 |
ManageEngine | ServiceDesk Plus MSP | affected 0 - < 14940 |
ManageEngine | SupportCenter Plus | affected 0 - < 14940 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now