CVE-2025-9435: Path Traversal
Published Jan 13, 2026
·Updated
Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module
Affected Software
14 affected components
Zohocorp ManageEngine ADManager Plus<7230
Zohocorp ManageEngine ADManager Plus<7.2
Zohocorp ManageEngine ADManager Plus=7.2-7200
Zohocorp ManageEngine ADManager Plus=7.2-7201
Zohocorp ManageEngine ADManager Plus=7.2-7202
Zohocorp ManageEngine ADManager Plus=7.2-7203
Zohocorp ManageEngine ADManager Plus=7.2-7210
Zohocorp ManageEngine ADManager Plus=7.2-7211
Zohocorp ManageEngine ADManager Plus=7.2-7212
Zohocorp ManageEngine ADManager Plus=7.2-7220
Zohocorp ManageEngine ADManager Plus=7.2-7221
Zohocorp ManageEngine ADManager Plus=7.2-7222
Zohocorp ManageEngine ADManager Plus=7.2-7223
Zohocorp ManageEngine ADManager Plus=7.2-7224
Remediation
Event History
Jan 13, 2026
CVE Published
via MITRE·01:14 PM
Data Sourced
via MITRE·01:14 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-9435?
CVE-2025-9435 is considered a significant security vulnerability due to its potential for path traversal attacks.
2
How do I fix CVE-2025-9435?
To fix CVE-2025-9435, upgrade Zohocorp ManageEngine ADManager Plus to version 7230 or later.
3
What versions of Zohocorp ManageEngine ADManager Plus are affected by CVE-2025-9435?
Zohocorp ManageEngine ADManager Plus versions below 7230 are affected by CVE-2025-9435.
4
What type of vulnerability is CVE-2025-9435?
CVE-2025-9435 is a path traversal vulnerability found in the User Management module of ADManager Plus.
5
What can attackers do with CVE-2025-9435?
Attackers can exploit CVE-2025-9435 to potentially access restricted file paths leading to unauthorized information disclosure.