CVE-2025-41437CWE-79

Reflected XSS

Medium · published June 9, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions 128565 and below are vulnerable to Reflected XSS on the login page.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-06-09T10:44Z
EPSS history
Timeline
  • 09 JUN 10:44Z
    Reflected XSS
    cvelistv5