CVE-2025-5496

BASSO 3.3CVE-2025-5496 · Published 21/10/2025 · updated 08/10/2026

In breve

CVE-2025-5496 è una vulnerabilità BASSO (CVSS 3.3) che riguarda manageengine endpoint central (zohocorp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.26%, superiore al 17.2% delle vulnerabilità.
Correzione: aggiornare a 11.4.2516.06, 11.4.2508.14 o successiva.

Package	Affected versions	Patched versions
manageengine endpoint central zohocorp	`≥ 11.4.2510.01, < 11.4.2516.06< 11.4.2508.14`	`11.4.2516.0611.4.2508.14`

Description

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

References

manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html · Vendor Advisory

Altre vulnerabilità di manageengine endpoint central

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine endpoint central

zohocorp

≥ 11.4.2510.01, < 11.4.2516.06< 11.4.2508.14

11.4.2516.0611.4.2508.14

Altre vulnerabilità di manageengine endpoint central

Vedi tutto →