CVE-2025-5494
LOWZohocorp Manageengine Endpoint Central < 11.4.2500.26 - Improper Privilege Management
Title source: ruleDescription
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
Scores
CVSS v3
3.9
EPSS
0.0001
EPSS Percentile
1.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Classification
CWE
CWE-269
Status
published
Affected Products (1)
zohocorp/manageengine_endpoint_central
< 11.4.2500.26
Timeline
Published
Sep 25, 2025
Tracked Since
Feb 18, 2026