Path Traversal Vulnerability in ManageEngine ADManager Plus by Zoho
CVE-2025-9435

5.5MEDIUM

Key Information:

Vendor

Zohocorp
Status
Manageengine Admanager Plus
Vendor
CVE Published:
13 January 2026

What is CVE-2025-9435?

ManageEngine ADManager Plus versions prior to 7230 exhibit a Path Traversal vulnerability in the User Management module. This flaw can potentially allow unauthorized users to access sensitive files on the server through manipulative input, posing significant security risks. Users and administrators should urgently apply updates to patch this vulnerability and safeguard their systems against exploitation.

Affected Version(s)

ManageEngine ADManager Plus Windows 0 < 7230

References

https://www.manageengine.com/products/ad-manager/admanage...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.