Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Zoho ManageEngine Endpoint Central ausnutzen, um Daten zu manipulieren oder seine Rechte zu erweitern.
Product
ManageEngine Endpoint Central ist eine Desktop- und Mobile-Device-Management-Software.
Vulnerabilities 2
-
Medium 5.2
XML Injection
Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
-
Low 3.3
Arbitrary File Deletion
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
Revision history
-
#1
Initiale Fassung
References
-
ManageEngine Knowledge Base vom 2025-10-21
https://www.manageengine.com/products/desktop-central/parsing-xml-data.html
-
ManageEngine Knowledge Base vom 2025-10-21
https://www.manageengine.com/products/desktop-central/kb/arbitrary-file-deletion-allows-local-privilege-escalation.html
-
NIST Vulnerability Database vom 2025-10-21
https://nvd.nist.gov/vuln/detail/CVE-2025-7473
-
NIST Vulnerability Database vom 2025-10-21
https://nvd.nist.gov/vuln/detail/CVE-2025-5496