CVE-2025-10020: Zohocorp ManageEngine Admanager Plus

High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days.

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.

Affected products

• Zohocorp ManageEngine Admanager Plus: before 8.0 (fixed in 8.0); version 8.0 only

Published 2025-10-21. Last modified 2026-10-08.