← Back

CVE-2025-27930

nvd nist
Published: Jul 23, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.3 / Impact: 2.7
Source: NVD

Description

Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.

Affected (7)

Zohocorp
1 product
Manageengine Applications Manager
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Applications Manager
version < 17.6
Manageengine Applications Manager
Version 17.6
Manageengine Applications Manager
Version 17.6 build176100
Manageengine Applications Manager
Version 17.6 build176200
Manageengine Applications Manager
Version 17.6 build176300
Manageengine Applications Manager
Version 17.6 build176500
Manageengine Applications Manager
Version 17.6 build176600

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (1)

Source: 0fc0942c-577d-436f-ae8e-945763c79b02
Vendor Advisory

Timeline

No history available yet.