CVE-2025-5496

EPSS 0.23%
Veröffentlicht 21.10.2025 10:15:34
Zuletzt bearbeitet 28.10.2025 15:36:52
Quelle 0fc0942c-577d-436f-ae8e-945763
CVE-Watchlists
Login
Unerledigt
Login

Arbitrary File Deletion

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zohocorp ≫ Manageengine Endpoint Central Version < 11.4.2508.14

Zohocorp ≫ Manageengine Endpoint Central Version >= 11.4.2510.01 < 11.4.2516.06

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.139

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
0fc0942c-577d-436f-ae8e-945763c79b02	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-5496

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-5496

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-5496

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-5496