← Back

CVE-2025-5494

nvd nist
Published: Sep 25, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.

Affected (2)

Zohocorp
1 product
Manageengine Endpoint Central
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Endpoint Central
Before 11.4.2500.26
Manageengine Endpoint Central
From 11.4.2508.01 to 11.4.2508.14

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

Source: 0fc0942c-577d-436f-ae8e-945763c79b02
Vendor Advisory

Timeline

No history available yet.