PT-2026-2435

CVE-2025-11250

·

Published

2026-01-13

·

Updated

2026-02-28

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions ManageEngine ADSelfService Plus versions prior to 6519
Description ManageEngine ADSelfService Plus versions before 6519 are susceptible to an authentication bypass due to improper filter configurations. This allows unauthorized access. The issue is expected to be rapidly exploited.
Recommendations Update ManageEngine ADSelfService Plus to version 6519 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-290: Authentication Bypass by Spoofing
Related identifiers
CVE-2025-11250
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com