VULNERABILITY INTELLIGENCE
CVE-2025-5494
CVSS score3.9 LOW
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-09-25
Last modified2026-10-11
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Description
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
Weakness classification
- CWE-269: Improper Privilege Management
Primary references
- 0fc0942c-577d-436f-ae8e-945763c79b02 — Vendor Advisory