VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Dec 15, 2025· Updated Jun 17, 2026

CVE-2025-11670

CVE-2025-11670

Description

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Zohocorp/Manageengine Admanager Plus12 versions
    cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*range: <8.0
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8000:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8001:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8002:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8010:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8011:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8012:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8020:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8021:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_admanager_plus:8.0:8022:*:*:*:*:*:*
    • (no CPE)range: <8025
    • (no CPE)range: 0
  • Manageengine/Admanager Plusllm-fuzzy
    Range: <8025

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.