6.5

CVE-2025-6239

Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176100
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176200
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176300
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176500
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176600
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176700
ZohocorpManageengine Applications Manager Version17.6 Updatebuild176800
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
0fc0942c-577d-436f-ae8e-945763c79b02 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.