PT-2025-46336 · Manageengine · Zoho Manageengine Applications Manager

Published 2025-10-22 · Updated 2025-11-11 · CVE-2025-9223

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 178100 and below

Description ManageEngine Applications Manager versions 178100 and below are subject to an authenticated command injection issue. This is due to improper configuration within the execute program action feature. The issue could allow for unauthorized command execution on affected systems.

Recommendations Versions prior to 178100 should be updated.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-16383

CVE-2025-9223

Affected Products

Zoho Manageengine Applications Manager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-9223 · Security Note
• https://bdu.fstec.ru/vul/2025-16383 · Security Note
• https://twitter.com/CveFindCom/status/1988255462773366986 · Twitter Post
• https://t.me/CVEtracker/37043 · Telegram Post
• https://t.me/cveNotify/142412 · Telegram Post
• https://twitter.com/CveTodo/status/1988252448008347996 · Twitter Post
• https://manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-9223.html · Note