CVE-2025-10020: Command Injection
Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Zohocorp ManageEngine ADManager Plusto a version that resolves this vulnerability.Fixed in 8024
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10020?
CVE-2025-10020 is classified as a high-severity authenticated command injection vulnerability.
How do I fix CVE-2025-10020?
You can fix CVE-2025-10020 by upgrading to version 8024 or later of Zohocorp ManageEngine ADManager Plus.
What component is affected by CVE-2025-10020?
CVE-2025-10020 affects the Custom Script component of Zohocorp ManageEngine ADManager Plus.
Is authentication required to exploit CVE-2025-10020?
Yes, an authenticated user is required to exploit the CVE-2025-10020 vulnerability.
Which versions of Zohocorp ManageEngine ADManager Plus are vulnerable to CVE-2025-10020?
All versions of Zohocorp ManageEngine ADManager Plus prior to 8024 are vulnerable to CVE-2025-10020.