CVE-2025-11670

NTLM Hash Exposure Vulnerability

CVSS 6.4 MEDIUMEPSS 0.4%CWE-200

Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Affected products

Zohocorp · ManageEngine ADManager Plus

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-11670.html