CVE-2025-5494CWE-269privilege-escalation

CVE-2025-5494

Low · published September 25, 2025

CVSS v3.1
3.9
EPSS
0%
Percentile
18.8
In the wild
Unconfirmed
What it is

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.

This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-09-25T18:15Z
Affected products (2)
ProductVersionsFixed in
zohocorp/manageengine_endpoint_central< 11.4.2500.2611.4.2500.26
zohocorp/manageengine_endpoint_central≥ 11.4.2508.01, < 11.4.2508.1411.4.2508.14
References (1)
https://www.manageengine.com/products/desktop-central/privilege-escalation-endpointcentral-agent.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 25 SEP 13:11Z
    Privilege Escalation
    cvelistv5