8.8
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.
AI Analysis
Authenticated command injection vulnerability due to improper configuration in the execute program action feature
Basic Information
ID
CVE-2025-9223
Source
Zohocorp
Published
Nov 11, 2025 at 13:13
Affected Product
Vendor
Zohocorp
Product
ManageEngine Applications Manager
Affected Versions
Zohocorp ManageEngine Applications Manager 0
CWE Classification
AI Assessment
AI Score
8.8 / 10
AI Severity
High
Vendor
Zohocorp
Product
ManageEngine Applications Manager
Version
178100 and below