CVE-2025-11670

MediumCVSS 6.4

Published: 15/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

Zohocorp ManageEngine ADManager Plus before version 8025 is vulnerable to NTLM Hash Exposure. This is exploitable only by technicians with the "Impersonate as Admin" option enabled.

Risk Assessment

Exposure of NTLM hashes could allow an attacker to access accounts and resources in the domain, compromising the entire infrastructure.

Recommendation

Update ADManager Plus to version 8025 or later and restrict technician privileges.

Other vulnerabilities in ManageEngine ADManager Plus

CVE-2025-10020High
Zohocorp ManageEngine ADManager Plus before version 8024 is vulnerable to authenticated command injection in the Custom Script component.

Original NVD description (English source)

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS