← Back

CVE-2025-5496

nvd nist
Published: Oct 21, 2025Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: 0fc0942c-577d-436f-ae8e-945763c79b02 (Secondary)

Description

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

Affected (2)

Zohocorp
1 product
Manageengine Endpoint Central
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Endpoint Central
Before 11.4.2508.14
Manageengine Endpoint Central
From 11.4.2510.01 to 11.4.2516.06

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

Source: 0fc0942c-577d-436f-ae8e-945763c79b02
Vendor Advisory

Timeline

No history available yet.