CVE-2025-8309CWE-269

User privilege escalation vulnerability

High · published August 20, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
18.4
In the wild
Unconfirmed
What it is

There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp.

This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110, ServiceDesk Plus MSP versions before 14940, and SupportCenter Plus versions before 14940.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-08-20T16:53Z
EPSS history
Timeline
  • 20 AUG 16:53Z
    User privilege escalation vulnerability
    cvelistv5