WID-SEC-W-2025-2383

DeutschShown in its original language — a full translation is planned for a future version.

Zoho ManageEngine Endpoint Central: Mehrere Schwachstellen

view advisory published 2025-10-21

Ein lokaler Angreifer kann mehrere Schwachstellen in Zoho ManageEngine Endpoint Central ausnutzen, um Daten zu manipulieren oder seine Rechte zu erweitern.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-7473US	medium5.3	0.34% (27th)	—	2025-10-21
Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
CVE-2025-5496US	—	0.26% (17th)	—	2025-10-21
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setu…

references

External citations — patches, advisories, analysis.

NIST Vulnerability Database vom 2025-10-21external
NIST Vulnerability Database vom 2025-10-21external
WID-SEC-W-2025-2383 - CSAF Versionself
WID-SEC-2025-2383 - Portal Versionself
ManageEngine Knowledge Base vom 2025-10-21external
ManageEngine Knowledge Base vom 2025-10-21external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan