Improper Privilege Management in ManageEngine Products
CVE-2025-8309

8.1HIGH

Key Information:

Vendor

Manageengine
Status
Asset Explorer
Servicedesk Plus
Servicedesk Plus Msp
Supportcenter Plus
Vendor
CVE Published:
20 August 2025

What is CVE-2025-8309?

An improper privilege management vulnerability has been identified in the ManageEngine suite including Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus. This flaw could allow attackers to exploit the system and gain unauthorized access to sensitive resources. Affected versions include Asset Explorer prior to 7710, ServiceDesk Plus prior to 15110, ServiceDesk Plus MSP prior to 14940, and SupportCenter Plus prior to 14940. It's recommended to update to the latest versions to mitigate potential risks.

Affected Version(s)

Asset Explorer 0 < 7710

ServiceDesk Plus 0 < 15110

ServiceDesk Plus MSP 0 < 14940

References

https://www.manageengine.com/products/service-desk/cve-20...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-8309 : Improper Privilege Management in ManageEngine Products