Zohocorp Endpoint Central vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Zohocorp Endpoint Central: 3 record(s), with affected versions and fixes.
CVE-2025-7473
Medium · 5.3
CWE-91 Oct 21, 2025
XML Injection
Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection.
CVE-2025-5496
Low · 3.3
CWE-269 Oct 21, 2025
Arbitrary File Deletion
ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component.
CVE-2025-5494
High · 7.8
CWE-269 Sep 25, 2025
Privilege Escalation
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.
This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.