9.9
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.
AI Analysis
Authenticated command injection vulnerability in the Custom Script component of ManageEngine ADManager Plus
Basic Information
ID
CVE-2025-10020
Source
Zohocorp
Published
Oct 21, 2025 at 12:12
Modified
Oct 21, 2025 at 13:20
Affected Product
Vendor
Zohocorp
Product
ManageEngine ADManager Plus
Version
before 8024
Affected Versions
Zohocorp ManageEngine ADManager Plus 0
CWE Classification
AI Assessment
AI Score
9.9 / 10
AI Severity
Critical
Vendor
Zohocorp
Product
ManageEngine ADManager Plus
Version
before 8024