CVE-2025-9223

—

CVSS 3.1

8.8 high

EPSS

4%p90

Published

Nov 11, 2025 (Nov 11, 2025)

Modified

Jun 17, 2026

Description

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.2%)

In the news0 stories

No ingested article mentions this CVE yet.