CVE-2025-8309

User privilege escalation vulnerability

State: Published
Severity: 8.1 High
Published: Aug 20, 2025
Updated: Feb 26, 2026
Reserved: Jul 29, 2025

Description

There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp.

This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	Zohocorp

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
Asset ExplorerManageEngine	before 7710Affected
ServiceDesk PlusManageEngine	before 15110Affected
ServiceDesk Plus MSPManageEngine	before 14940Affected
SupportCenter PlusManageEngine	before 14940Affected

References

https://www.manageengine.com/products/service-desk/cve-2025-8309.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.