CVE-2025-9223 in Applications Manager

Riassunto

di MITRE • 11/11/2025

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Zohocorp
• Prenotare: 20/08/2025
• Divulgazione: 11/11/2025
• Moderazione: accettato
• Voce: VDB-331864
• CPE: pronto
• CWE: CWE-77 (confermato)
• CVSS: 8.8 (CNA)
• EPSS: 0.04242
• KEV: no
• Attività: molto basso
• Settore: Finance, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9223
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9223
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9223/