CVE-2025-9223

CWE-77 — Command Injection3 documents3 sources

Severity

8.8HIGH

EPSS

1.0%

top 23.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Zohocorp Manageengine Applications Manager

Timeline

PublishedNov 11

Description

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5zohocorp/manageengine_applications_manager< 178200

🔴Vulnerability Details

GHSA

GHSA-pg3q-qhg7-vjw9: Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improp↗2025-11-11

▶

CVEList

Command Injection↗2025-11-11

▶