CVE-2025-9223

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

Score

CVSS 3.1 8.8 High

Status

Deferred - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2025-11-11

Last modified

2026-02-26

Weaknesses

CWE-77

Affected products

• Manageengine Applications Manager (Zohocorp)

References

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-9223.html