CVE-2025-5496

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5496
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*
History

28 Oct 2025, 15:36

Type Values Removed Values Added
CPE cpe:2.3:a:zohocorp:manageengine_endpoint_central:*:*:*:*:*:*:*:*
First Time Zohocorp manageengine Endpoint Central
Zohocorp
References () https://www.manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html - () https://www.manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html - Vendor Advisory

21 Oct 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-21 10:15

Updated : 2025-10-28 15:36

NVD link : CVE-2025-5496

Mitre link : CVE-2025-5496

CVE.ORG link : CVE-2025-5496

JSON object : View

Products Affected

zohocorp

  • manageengine_endpoint_central
CWE
CWE-269

Improper Privilege Management