CVE-2025-9223

Command Injection

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

Affected

Zohocorp · ManageEngine Applications Manager

CVSS v3.1 CNA

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

4.14% chance of exploitation in the next 30 days, 91st percentile

Published

2025-11-11

Updated

2026-02-26

Proof-of-concept exploits (1)

• networkkiller/CVE-2025-92232★ · 2025-11-11

References

• CVE Record
• NVD entry