CVE-2025-9223

Summary

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

Affected Software

Weaknesses

• CWE-77: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-9223.html

• ←Previous
• Next→