CVE-2025-9223

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

4.24% chance of exploitation in the next 30 days, 90th percentile

Published

2025-11-11

Updated

2026-02-26

Proof-of-concept exploits (1)

• networkkiller/CVE-2025-9223

References

• CVE Record
• NVD entry

Related

• CVE-2025-9222
• CVE-2025-9233
• CVE-2025-9216
• CVE-2025-9234
• CVE-2025-9215
• CVE-2025-9235