Improper Privilege Management in ManageEngine Products
CVE-2025-8309

8.1HIGH

Key Information:

Vendor

Manageengine
Status
Asset Explorer
Servicedesk Plus
Servicedesk Plus Msp
Supportcenter Plus
Vendor
CVE Published:
20 August 2025

What is CVE-2025-8309?

An improper privilege management vulnerability has been identified in the ManageEngine suite including Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus. This flaw could allow attackers to exploit the system and gain unauthorized access to sensitive resources. Affected versions include Asset Explorer prior to 7710, ServiceDesk Plus prior to 15110, ServiceDesk Plus MSP prior to 14940, and SupportCenter Plus prior to 14940. It's recommended to update to the latest versions to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Asset Explorer 0 < 7710

ServiceDesk Plus 0 < 15110

ServiceDesk Plus MSP 0 < 14940

References

https://www.manageengine.com/products/service-desk/cve-20...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.