PT-2025-46342 · Manageengine · Manageengine Opmanager

Published 2025-08-21 · Updated 2025-11-11 · CVE-2025-9227

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions 128609 and below

Description ManageEngine OpManager is susceptible to a Stored Cross-Site Scripting (XSS) issue within the Simple Network Management Protocol (SNMP) trap processor. This allows for the injection of malicious scripts that can be stored and executed by other users.

Recommendations Update ManageEngine OpManager to a version higher than 128609.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-16381

CVE-2025-9227

Affected Products

Manageengine Opmanager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-9227 · Security Note
• https://bdu.fstec.ru/vul/2025-16381 · Security Note
• https://twitter.com/VulmonFeeds/status/1988270508131893392 · Twitter Post
• https://manageengine.com/itom/advisory/cve-2025-9227.html · Note
• https://t.me/cveNotify/142413 · Telegram Post
• https://t.me/CVEtracker/37044 · Telegram Post