CVE-2025-5496

LOW

Zohocorp Manageengine Endpoint Central < 11.4.2508.14 - Improper Privilege Management

Title source: rule
STIX 2.1

Description

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

References (1)

Core 1

Scores

CVSS v3 3.3
EPSS 0.0021
EPSS Percentile 11.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-269
Status published
Products (1)
zohocorp/manageengine_endpoint_central < 11.4.2508.14
Published Oct 21, 2025
Tracked Since Feb 18, 2026