ManageEngine (AssetExplorer, ServiceDesk Plus, and others) Family August 2025 Security Update Advisory

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. Users of affected products are advised to update to the latest version.

 

Affected Products

 

AssetExplorer 7700 and earlier versions

ServiceDesk Plus 15100 and earlier versions

ServiceDesk Plus MSP 14930 and earlier

SupportCenter Plus 14930 and earlier

 

Resolved Vulnerabilities

 

High Impact Elevation of Privilege Vulnerability (CVE-2025-8309) in AssetExplorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus [1]

 

Vulnerability Patches

 

Please follow the security advisory published on August 19, 2018 to update to the appropriate version and the latest version.

AssetExplorer 7710 version

ServiceDesk Plus version 15110

ServiceDesk Plus MSP 14940 version

SupportCenter Plus 14940 version

 

Referenced Sites

 

[1] CVE-2025-8309 – User privilege escalation vulnerability

https://www.manageengine.com/products/service-desk/cve-2025-8309.html