high8.5

CVE-2025-10020

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.

Impact

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.

Affected products

Vendor	Product	Affected versions
Zohocorp	Manageengine Admanager Plus	before 8.0 Version 8.0

Weakness classification

CWE-77

References

NVD record
CVE.org record
https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-10020.html