CVE-2025-9227CWE-79cross-site-scripting

CVE-2025-9227

Medium · published November 11, 2025

CVSS v3.1

6.5

EPSS

Percentile

38.3

In the wild

Unconfirmed

What it is

Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.00453 · 38.3th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2025-11-11T19:15Z

References (1)

EPSS history

Timeline