← Back

CVE-2025-9787

nvd nist
Published: Dec 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Exploitability: 0.9 / Impact: 5.2
Source: 0fc0942c-577d-436f-ae8e-945763c79b02 (Secondary)

Description

Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view.

Affected (16)

Zohocorp
1 product
Manageengine Applications Manager
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Applications Manager
From 17.4 to 17.7
Manageengine Applications Manager
Version 17.3 build173300
Manageengine Applications Manager
Version 17.3 build173301
Manageengine Applications Manager
Version 17.3 build173302
Manageengine Applications Manager
Version 17.3 build173303
Manageengine Applications Manager
Version 17.3 build173304
Manageengine Applications Manager
Version 17.7
Manageengine Applications Manager
Version 17.7 build177000
Manageengine Applications Manager
Version 17.7 build177100
Manageengine Applications Manager
Version 17.7 build177200
Manageengine Applications Manager
Version 17.7 build177201
Manageengine Applications Manager
Version 17.7 build177202
Manageengine Applications Manager
Version 17.7 build177203
Manageengine Applications Manager
Version 17.7 build177204
Manageengine Applications Manager
Version 17.7 build177300
Manageengine Applications Manager
Version 17.7 build177400

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (1)

Source: 0fc0942c-577d-436f-ae8e-945763c79b02
PatchVendor Advisory

Timeline

No history available yet.