CVE-2025-11670

Published Dec 15, 2025

Last updated 3 months ago

Overview

Description
Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure.  This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.
Source
0fc0942c-577d-436f-ae8e-945763c79b02
NVD status
Analyzed
Products
manageengine_admanager_plus

Risk scores

CVSS 3.1

Type
Primary
Base score
4.3
Impact score
1.4
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity
MEDIUM

Weaknesses

0fc0942c-577d-436f-ae8e-945763c79b02
CWE-200
nvd@nist.gov
NVD-CWE-noinfo

Social media

Hype score
Not currently trending

Configurations