CVE-2025-1723

Account takeover PUBLISHED

Description (CNA)

Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.

Affected (CNA)

Vendor / product	Versions
ManageEngine / ADSelfService Plus	affected 0 before 6511

CWE

CWE-287

References

https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.