VDB
CVE-2025-1723
CVE-2025-1723
PUBLISHED
CVSS 8.100000381469727 HIGH
Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.
EPSS 0.29% · 52.8th percentile
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.29%
52.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| zohocorp | manageengine_adselfservice_plus | 6.5, 0, 6.5 |
| ManageEngine | ADSelfService Plus | 0 |
Timeline
- Feb 26, 2025 CVE ID Reserved
- Mar 3, 2025 CVE Published
- Mar 3, 2025 PoC Published
- Mar 3, 2025 PoC Published
- Mar 3, 2025 PoC Published
- Mar 3, 2025 CVE Updated
- Mar 4, 2025 EPSS Score
- Mar 5, 2025 PoC Published
- Mar 5, 2025 PoC Published
- Mar 5, 2025 PoC Published
- Mar 7, 2025 PoC Published
- Mar 16, 2025 Coalition ESS Score