CVE-2025-8309: User privilege escalation vulnerability
There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp.
This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8309?
CVE-2025-8309 is classified as a critical vulnerability due to improper privilege management.
What products are affected by CVE-2025-8309?
CVE-2025-8309 impacts ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus.
How do I fix CVE-2025-8309?
To address CVE-2025-8309, upgrade to Asset Explorer version 7710 or later, ServiceDesk Plus version 15110 or later, ServiceDesk Plus MSP version 14940 or later, or SupportCenter Plus version 14940 or later.
What are the potential risks of CVE-2025-8309?
CVE-2025-8309 can lead to unauthorized access and control over sensitive information within the affected applications.
Is there a workaround for CVE-2025-8309 if I can't immediately update?
Currently, there are no known workarounds for CVE-2025-8309, and updating is strongly recommended.