CVE-2025-11250

Critical

Published: 13/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Authentication bypass vulnerability in Zohocorp ManageEngine ADSelfService Plus before version 6519 due to improper filter configurations.

An unauthorized user can gain access to the system without valid credentials, potentially leading to data security breaches.

Update ADSelfService Plus to version 6519 or later, which includes the fix.

Original NVD description (English source)

Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.