CVE-2025-9435

—

CVSS 3.1

5.5 medium

EPSS

<1%p44

Published

Jan 13, 2026 (Jan 13, 2026)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module

Vendors: zohocorp
Products: manageengine admanager plus
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.