CVE-2025-11250

Published: Jan 13, 2026Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: 0fc0942c-577d-436f-ae8e-945763c79b02 (Secondary)

Description

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.

Products: Zohocorp: Manageengine Adselfservice Plus

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adselfservice Plus	Before 6.5
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6500
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6501
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6502
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6503
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6504
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6505
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6506
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6507
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6508
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6509
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6510
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6511
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6512
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6513
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6514
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6515
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6516
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6517
Zohocorp Manageengine Adselfservice Plus	Version 6.5 6518

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

PatchVendor Advisory

No history available yet.